CCR Questions, Answered

The Consumer Confidence Report rule generates questions from both consumers trying to read their water report and utility staff preparing one. This page answers the twenty most common directly, with citations to the underlying regulation.

What is a Consumer Confidence Report?

A Consumer Confidence Report (CCR) — also called an Annual Water Quality Report — is the federally required disclosure that every community water system must deliver to customers once a year. It lists detected contaminants, compares them to federal limits, and describes any violations. The requirement comes from the Safe Drinking Water Act, codified at 42 U.S.C. § 300g-3(c)(4) through the 1996 SDWA amendments. See the CCR overview for full background.

Who has to publish a CCR?

Every community water system (CWS) — a public water system that serves the same population year-round — must produce a CCR. That includes municipal utilities, rural water districts, and investor-owned systems. Non-community systems (schools, campuses, seasonal facilities) and private wells are exempt. The CWS definition is at 40 CFR § 141.151(b).

When is the CCR due each year?

The annual CCR must reach customers by July 1, covering prior-year water quality data. Systems serving 10,000 or more persons must also send a second report by December 31. After delivery, systems have 10 days to certify to their primacy agency. (40 CFR § 141.155(j)(2); AWWA summary of 2024 CCR Rule Revisions)

What changes in 2027?

Four major requirements take effect under the 2024 CCR Rule Revisions (89 FR 46013):

Separately, the LCRI lead action level of 10 µg/L takes effect November 1, 2027. See the 2027 rule changes explainer.

How are CCRs delivered to customers?

Federal rules allow four methods: (i) mail or hand delivery of a paper copy; (ii) a mailed notice with a direct URL to the online report; (iii) email with a direct link or the electronic file; or (iv) another primacy-agency-approved method. Systems must make a good-faith effort to reach customers who don't receive a direct water bill. (40 CFR § 141.155(a))

Can I get a paper copy if I'd rather not read it online?

Yes. Any system using electronic delivery must still provide a paper copy to any customer who requests one, at no charge. (40 CFR § 141.155(a))

What's the difference between an MCL and an MCLG?

An MCL (Maximum Contaminant Level) is an enforceable legal limit — exceeding it is a violation requiring consumer notice and corrective action. An MCLG (Maximum Contaminant Level Goal) is a non-enforceable public health target set where no known adverse effects occur. For lead, the MCLG is zero because there is no confirmed safe level. CCRs list both. See the glossary for full definitions.

What does "non-detect" or "ND" mean on a CCR?

"ND" means the contaminant was not found at or above the laboratory's detection limit. It does not mean zero — it means the level, if any, was below what the instrument can reliably measure. Systems must still list the contaminant in the CCR table when it was tested, even if the result is ND. (40 CFR § 141.151(d))

What is an "action level" and how is it different from an MCL violation?

An action level (AL) triggers required system responses — additional monitoring, public notice, and possibly treatment or pipe replacement — but exceeding it is not itself a violation. An MCL violation is a breach of an enforceable legal limit and requires formal regulatory response. Under the LCRI, the lead action level drops to 10 µg/L on November 1, 2027, down from 15 µg/L. (40 CFR § 141.152(a))

Why does my CCR list health effects for some contaminants but not others?

Federal rules require health-effects language only for contaminants that exceeded an MCL, or that trigger specific mandatory disclosures — for example, the nitrate-infants notice at any detection level, or lead educational language (required every year regardless of results). For contaminants detected but below the MCL, health-effects text is encouraged but not required. (40 CFR § 141.153(d))

What did the 2024 rule change about lead in drinking water?

The Lead and Copper Rule Improvements (LCRI), finalized October 8, 2024 (89 FR 86416), lowered the lead action level from 15 µg/L to 10 µg/L, effective November 1, 2027. It also requires paired first-and-fifth-liter samples at lead service line sites, using the higher of the two values for compliance. Systems must replace all lead service lines within 10 years of that date. See contaminants for detail.

How does the new PFAS rule affect my CCR?

The PFAS National Primary Drinking Water Regulation (April 26, 2024; 89 FR 32532) requires systems to complete initial PFAS monitoring by April 26, 2027, and to include results in the CCR starting that year. MCLs become enforceable April 26, 2029. Systems detecting regulated PFAS must add them to the contaminant table with applicable health-effects language.

What's the PFAS Hazard Index?

The PFAS rule sets five individual MCLs (for PFOA, PFOS, PFHxS, PFNA, and HFPO-DA) plus a Hazard Index (HI) of 1 for mixtures of {PFHxS, PFNA, HFPO-DA, PFBS}. PFBS has no individual MCL — it is regulated only through the HI. A HI above 1 triggers the same response as an individual MCL exceedance. (EPA PFAS NPDWR Technical Overview; 89 FR 32532) See also the glossary.

Does my system have to translate the CCR?

Two separate federal triggers apply. First, if your primacy agency determines your service area has a "large proportion" of consumers with limited English proficiency (LEP), translated content is required — the threshold varies by state (40 CFR § 141.153(h)(3)). Second, systems serving 100,000 or more must develop an LEP assistance plan and include it with the first 2027 report, updated annually (40 CFR § 141.155(i)).

Why does my California CCR have a "PHG" column?

California CCRs include a Public Health Goal (PHG) column — state advisory benchmarks set by OEHHA (the California Office of Environmental Health Hazard Assessment). PHGs are not enforceable but are often more stringent than federal MCLGs, and California law requires systems to report them alongside federal standards. PHGs do not appear in CCRs from other states. See the California requirements page.

What's a Public Health Goal (PHG)?

A Public Health Goal is California's advisory health target for a contaminant — the level at which no significant health risk is expected over a lifetime of exposure. Unlike the federal MCLG, a PHG is set purely on health evidence by OEHHA under California Health & Safety Code § 116365, without weighing treatment feasibility. PHGs appear in California CCRs as an extra comparison column and are not enforceable.

What if my system has lead service lines?

The 2024 CCR Rule Revisions require every CCR to state that a service line inventory exists and tell customers how to access it. If you have lead service lines, the CCR must also reference your replacement plan (40 CFR § 141.153(h)(8)(ii)–(iii)). Under the LCRI, all LSLs must be replaced within 10 years of November 1, 2027. If you have no LSLs, you must still include a written statement confirming that. See contaminants.

Where can I find archived CCRs from past years?

Systems serving 50,000 or more persons must post the current-year report on a public website (40 CFR § 141.155(f)). Smaller systems must provide reports on request. EPA's Safe Drinking Water Information System (SDWIS) has compliance history by system. Many states also keep public CCR repositories.

Who do I contact if I have questions about my water quality?

Start with your water system — every CCR must include a customer contact phone number. If the system is unresponsive or you have concerns about a violation, contact your state's primacy agency (the state environmental or health department that regulates drinking water). EPA's directory of primacy agencies is at epa.gov/ccr.

What if my CCR shows a violation?

A CCR violation means a system exceeded an MCL, missed a monitoring deadline, or failed to report required data. The CCR must identify the contaminant, describe potential health effects, explain what the system is doing to fix the problem, and state any actions consumers should take. An acute Tier 1 violation also triggers a 24-hour public notice separate from the CCR. Your primacy agency tracks violations and required corrective actions. (40 CFR § 141.153(d))

Last reviewed: 2026-05-03. Next scheduled review: every 6 months.