Regulators are gearing up to decide how to handle the $1 billion CBD industry, whose lotions and cookies currently exist in a legal haze