Cannabidiol (CBD)-containing products are widely marketed as over the counter products, mostly as food supplements. Adverse effects reported in anecdotal consumer reports or during clinical studies were first assumed to be due to hydrolytic conversion of CBD to psychotropic Δ 9-tetrahydrocannabinol (Δ 9-THC) in the stomach after oral consumption. However, research of pure CBD solutions stored in simulated gastric juice or subjected to various storage conditions such as heat and light with specific liquid chromatographic/tandem mass spectrometric (LC/MS/MS) and ultra-high pressure liquid chromatographic/quadrupole time-of-flight mass spectrometric (UPLC-QTOF) analyses was unable to confirm THC formation. Another hypothesis for the  adverse effects of CBD products may be residual Δ 9-THC concentrations in the products as contamination, because most of them are based on hemp extracts containing the full spectrum of cannabinoids besides CBD. Analyses of 181 food products of the German market (mostly CBD oils) confirmed this hypothesis: 21 products (12%) contained Δ 9-THC above the lowest observed adverse effect level (2.5 mg/day). Inversely, CBD was present in the products below the no observed adverse effect level. Hence, it may be assumed that the adverse effects of some commercial CBD products are based on a low-dose effect of Δ 9-THC and not due to effects of CBD itself. The safety, efficacy and purity of commercial CBD products is highly questionable, and all of the products in our sample collection showed various non-conformities to European food law such as unsafe Δ 9-THC levels, hemp extracts or CBD isolates as non-approved novel food ingredients, non-approved health claims, and deficits in mandatory food labelling requirements. In view of the growing market for such lifestyle products, the effectiveness of the instrument of food business operators' own responsibility for product safety and regulatory compliance must obviously be challenged, and a strong regulatory framework for hemp products needs to be devised.