candy law