EPA drinking water standards — what they protect and what they don't

The EPA sets federally enforceable standards for contaminants in public drinking water under the Safe Drinking Water Act. The standards exist to protect public health at the scale of the entire United States, and they reflect a deliberate balance between health protection and the practical reality of treating water at thousands of utilities serving hundreds of millions of people. This article explains how the standards are structured, how they get set, what they cover, what they leave out, and how to read your own water's situation against them. It also acknowledges where the system has limits and where the science has moved faster than the regulations — both real, both worth understanding.

Why this matters

EPA drinking water standards are the most consequential set of rules governing what comes out of your tap. They determine what utilities must monitor for, what levels are considered legally acceptable, and what happens when those levels are exceeded. Understanding the standards is the foundation for reading a Consumer Confidence Report, evaluating a treatment recommendation, or interpreting any other water-quality information you encounter.

The standards are also widely misunderstood. Some treat them as a gold standard above critique; others treat them as a captured floor designed to protect industry. Neither framing is accurate. The standards are a particular kind of benchmark, produced by a particular kind of process, with particular strengths and particular limits. This article explains what they actually are.

This article is for anyone trying to make sense of regulatory information about their water — what's regulated, what isn't, why the numbers are what they are, and how to think about the gap between "your water meets EPA standards" and "your water is risk-free."

The Safe Drinking Water Act, in brief

EPA's authority to set drinking water standards comes from the Safe Drinking Water Act (SDWA), originally passed in 1974 and substantially amended in 1986 and 1996. The SDWA gives EPA the responsibility to identify contaminants that may have adverse health effects, determine which warrant regulation, and set enforceable limits where regulation is warranted.

The SDWA applies to public water systems — defined as systems serving at least 15 service connections or 25 people for at least 60 days a year. It does not apply to private wells. A reader on a private well is outside the SDWA's regulatory scope; the EPA standards described in this article are still useful as benchmarks for evaluating well water, but they are not legally binding on a private well owner.

A key feature of the SDWA is that it explicitly requires EPA to balance health protection against feasibility. The statute directs EPA to set enforceable limits at levels that are as close as feasible to a health goal, where "feasible" considers the best technology available, the cost of treatment, and the practical realities of implementation across the entire country. This balance is not a flaw in the system; it is what the law requires. But it does mean that the enforceable standard is not always identical to the level associated with the lowest measurable health risk. Understanding this distinction is essential to reading EPA standards accurately.

How a standard gets set

EPA's process for setting a drinking water standard is deliberately slow and deliberately structured. The general path runs through several stages:

Identification. EPA maintains the Contaminant Candidate List (CCL), a list of contaminants that are known or anticipated to occur in public water systems and may warrant regulation. The CCL is updated every five years. Contaminants on the list are not yet regulated; they are candidates for possible future regulation.

Monitoring. Through the Unregulated Contaminant Monitoring Rule (UCMR), EPA requires public water systems to monitor for a rotating set of unregulated contaminants. Each UCMR cycle runs roughly five years and includes 20–30 contaminants. The data produced helps EPA understand which contaminants actually occur, at what levels, and in what geographic distribution. The UCMR is currently in its fifth iteration (UCMR 5, 2023–2025), which included PFAS monitoring.

Regulatory determination. Based on occurrence data, health effects research, and the prospect of meaningful health risk reduction, EPA makes a formal determination whether to regulate a contaminant. A determination to regulate triggers the rulemaking process; a determination not to regulate keeps the contaminant unregulated, though it remains under monitoring.

Rulemaking. Once EPA decides to regulate a contaminant, it proposes a rule, accepts public comment, revises in response to comments, and eventually finalizes the rule. The rulemaking process for a single contaminant can take years, and the resulting rule is subject to legal challenge in federal court.

This process is not arbitrary. It is designed to produce regulations that rest on substantial scientific evidence, that have been tested against public comment from affected parties (utilities, public health groups, environmental advocates, industry, state regulators), and that can survive judicial challenge. The trade-off is speed: a contaminant of emerging concern can take years to move from "scientific evidence suggests this is a problem" to "federally enforceable standard." PFAS is the recent worked example. The case for regulating PFAS in drinking water was building in the peer-reviewed literature for over a decade before EPA finalized MCLs in April 2024.

The four kinds of standards

EPA's regulatory framework includes four distinct types of drinking water standards. Each does different work, and understanding them individually is necessary to read the EPA framework accurately.

Maximum Contaminant Levels (MCLs)

An MCL is the legally enforceable maximum concentration of a contaminant allowed in public drinking water. Every regulated contaminant has an MCL (unless it is regulated by Treatment Technique instead — see below). The MCL is what a utility must not exceed in the water it delivers; exceeding the MCL is a violation that triggers notification, corrective action, and potential enforcement.

MCLs are health-based and reflect the SDWA's feasibility balance. EPA sets each MCL at a level that is "as close as feasible" to a health goal (the MCLG, below), where feasibility considers treatment technology, analytical capability, and cost.

Examples:

• Arsenic: 10 ppb
• Lead: 15 ppb action level (lead is regulated through a Treatment Technique with an action level rather than a traditional MCL — see Action Levels below)
• Total trihalomethanes: 80 ppb
• Haloacetic acids (HAA5): 60 ppb
• Nitrate: 10 mg/L (as nitrogen)
• PFOA: 4 ppt (finalized April 2024)
• PFOS: 4 ppt (finalized April 2024)

Maximum Contaminant Level Goals (MCLGs)

An MCLG is a non-enforceable health goal set at a level at which no known or anticipated adverse health effects occur, with an adequate margin of safety. Unlike the MCL, the MCLG is set without regard to feasibility. It represents the level EPA would set if treatment cost, technology, and analytical capability were not constraints.

For some contaminants, the MCLG and the MCL are identical or very close. For others, they differ substantially. For known or probable human carcinogens, the MCLG is often set at zero, reflecting EPA's policy that no level of exposure is presumed safe. The MCL for these contaminants is set at the lowest feasible level above zero.

The gap between an MCL and its MCLG is one of the cleanest places to see the feasibility balance in action. Lead has an MCLG of zero and an action level of 15 ppb. Arsenic has an MCLG of zero and an MCL of 10 ppb. Total trihalomethanes have an MCLG of zero for some component compounds and an MCL for the total at 80 ppb. The gap is not a regulatory failure; it is what the SDWA requires. But it is also a real gap, and a reader trying to understand their water's situation should know that meeting the MCL is not the same as meeting the MCLG.

Treatment Techniques (TTs)

Some contaminants cannot be reliably measured at low concentrations using current technology, or are most appropriately controlled through a required treatment process rather than a numerical limit. For these, EPA sets a Treatment Technique — a required procedure or technology rather than an enforceable concentration.

The clearest example is the Lead and Copper Rule. Lead is regulated through a treatment technique that requires utilities to optimize corrosion control, monitor tap water in high-risk homes, and take specified actions if an Action Level (described below) is exceeded. The Lead and Copper Rule does not set an MCL for lead in the traditional sense; it sets a regulatory regime.

Other contaminants regulated by Treatment Technique include certain microbial contaminants (where the treatment requirement is filtration or disinfection meeting specified performance criteria) and some viruses.

Action Levels

Action Levels apply specifically in the Lead and Copper Rule. An Action Level is a tap-level concentration that, if exceeded in more than 10 percent of sampled homes, triggers required utility-level actions — corrosion control optimization, public education, and in some cases lead service line replacement. The current Action Level for lead is 15 ppb (with the Lead and Copper Rule Improvements finalized in October 2024 lowering this to 10 ppb on a compliance schedule running through 2027).

Action Levels are sometimes confused with MCLs. They are not the same thing. An Action Level is a tap-level threshold that triggers utility response; it is not a legal limit on lead in water in the way an MCL is a legal limit. In practice, a homeowner whose tap water tests above 15 ppb for lead has a real concern regardless of the regulatory framework — but the regulatory mechanism is structured differently than the MCL framework most other contaminants use.

Secondary Standards — aesthetic, not health-based

Distinct from the four types above, EPA also publishes Secondary Maximum Contaminant Levels (SMCLs) under the National Secondary Drinking Water Regulations. These cover contaminants and water characteristics that affect taste, odor, color, or how water interacts with plumbing — aesthetic effects rather than health effects.

Secondary Standards are not federally enforceable. States may adopt them, modify them, or ignore them. Utilities typically monitor for the most consequential secondary contaminants because customers complain when water tastes bad or stains laundry, but the compliance framework is different.

We cover the Primary/Secondary distinction in detail in our health-based vs. aesthetic water concerns article. For purposes of this article, the key point is that when someone refers to "EPA drinking water standards," they almost always mean the legally enforceable Primary Standards. Secondary Standards exist in parallel and serve a different purpose.

State primacy and state-level variation

Most states have been granted primary enforcement authority — "primacy" — by EPA to administer the SDWA themselves. Both North Carolina and Virginia have primacy. A state with primacy is responsible for monitoring, enforcement, and reporting under the SDWA, with EPA in an oversight role.

A state with primacy can adopt EPA's federal standards as-is, or it can adopt stricter standards. States cannot adopt weaker standards than EPA's — the federal standard is a floor.

A few examples of state-level variation:

• California has adopted Public Health Goals (PHGs) for many contaminants that are substantially lower than federal MCLs. PHGs are not enforceable in the way MCLs are, but they influence California's regulatory decisions and inform state-level guidance to utilities.
• New Jersey has adopted MCLs for certain PFAS compounds at levels lower than the federal MCLs.
• Michigan revised its own Lead and Copper Rule in 2018 to require a lower action level (12 ppb) ahead of federal action.

For North Carolina and southern Virginia readers, the practical implication is that you are subject to federal standards as administered by your state's drinking water program. NC DEQ's Public Water Supply Section administers the SDWA in North Carolina; Virginia's Department of Health Office of Drinking Water administers it in Virginia. Both states generally follow EPA standards without adopting stricter versions, though specific implementation details (sampling schedules, enforcement practices, public notification requirements) can vary at the state level.

What EPA standards do well

The strengths of the EPA standards framework are real and worth stating clearly.

The standards are evidence-based and durable. Each MCL rests on a substantial body of toxicological, epidemiological, and occurrence research. The process of getting from "scientific evidence" to "final rule" requires that evidence to be presented, contested, and survive review. The resulting standards have repeatedly survived legal challenges, including challenges from industry seeking to weaken them and from environmental groups seeking to strengthen them. A standard that has been through that process is not arbitrary.

The standards apply uniformly across the country. A utility in North Carolina, a utility in Wyoming, and a utility in Massachusetts are all subject to the same federal MCLs. This uniformity is the basic guarantee the SDWA provides — that the water from any regulated public water system in the United States meets at least a defined federal floor.

The standards are designed to protect sensitive populations. EPA's risk assessments generally consider exposure scenarios that include sensitive groups: infants, children, pregnant people, the elderly, and those with compromised immune systems. The standards are not calibrated only to healthy adults.

The standards produce monitoring data that becomes public. Because regulated utilities must monitor for regulated contaminants and report the results, the United States has one of the most comprehensive public records of drinking water quality in the world. Every utility's Consumer Confidence Report is public; every monitoring violation is reportable; the data infrastructure (EPA's SDWIS, state agency records) is queryable. This transparency is itself a public-health asset.

Where EPA standards have limits

Equally honest acknowledgment of the limits:

Feasibility-balanced is not health-only. The SDWA explicitly requires EPA to consider treatment cost, technology, and practicality. This means the enforceable limit can be higher than the level associated with measurable health risk. For carcinogens with an MCLG of zero, the gap between zero and the MCL is the feasibility margin; it is not a level "below which there is no risk."

Regulation can lag the science. The deliberate, evidence-driven, legally-defensible process EPA uses produces durable regulations but slow ones. A contaminant of emerging concern can be the subject of peer-reviewed health research for many years before reaching the MCL stage. The case for PFAS regulation was building in the literature throughout the 2000s and 2010s; the final MCL came in 2024. This is the cost of a process designed to produce regulations that survive challenge.

Many contaminants are not regulated at all. EPA's regulated list is substantial — roughly 90 contaminants under the Primary Standards — but it is far smaller than the universe of substances that occur in drinking water. Pharmaceuticals, personal care products, microplastics, many industrial chemicals, and many emerging contaminants are not on the regulated list. Some are on the Contaminant Candidate List or under UCMR monitoring; others are not yet under formal consideration. "EPA does not regulate this contaminant" can mean any of: EPA has determined it does not warrant regulation, EPA is currently monitoring it, EPA is considering whether to regulate it, or EPA has not yet evaluated it.

The MCL framework is contaminant-by-contaminant. Each MCL evaluates one substance against feasibility and health evidence. The framework does not formally address cumulative exposure across multiple low-level contaminants, mixtures, or interaction effects. This is a known limitation of contaminant-by-contaminant regulation generally, not a flaw specific to EPA.

Standards apply at the point of compliance, not the tap. Most monitoring under EPA standards occurs at the entry point to the distribution system — the water leaving the treatment plant or wholesale interconnection. Tap-level conditions can be different. Lead is the most consequential example: a utility's lead-free water leaving the plant can pick up lead from premises plumbing before reaching the tap. The Lead and Copper Rule addresses this through tap sampling, but the broader point is that MCL compliance at the plant is not identical to MCL-level water at the tap.

Recent regulations are still being implemented. EPA finalized MCLs for six PFAS compounds in April 2024 with compliance dates phased through 2029. EPA finalized the Lead and Copper Rule Improvements in October 2024 with compliance through 2027. The Consumer Confidence Report Rule Revisions take effect in 2027. During implementation phases, the published standards are in effect but the operational reality at utilities may not yet reflect them.

PFAS as a worked example

The PFAS story illustrates several of the features described above operating together. PFAS compounds — per- and polyfluoroalkyl substances — have been used in industrial and consumer applications since the 1940s. Health concerns emerged in the peer-reviewed literature in the early 2000s and intensified through the 2010s, including evidence linking certain PFAS to cancers, immune effects, developmental effects, and other health endpoints.

EPA's path on PFAS ran through the regulatory pipeline as designed. PFAS appeared on the Contaminant Candidate List. UCMR cycles monitored for PFAS occurrence (UCMR 3 in 2013–2015 produced the first nationwide occurrence data; UCMR 5 in 2023–2025 expanded coverage). EPA published health advisories — non-enforceable guidance levels — in 2009, 2016, and again in 2022. The 2022 advisories were dramatically lower than earlier ones, reflecting the emerging science. EPA proposed a National Primary Drinking Water Regulation for PFAS in March 2023, accepted public comment, and finalized the rule in April 2024.

The final MCLs are 4 ppt for PFOA and PFOS individually, with additional standards for several other PFAS compounds. These are extraordinarily low limits — at the edge of what laboratory methods can reliably measure — and reflect EPA's determination that the health risks from these compounds occur at very low concentrations.

The honest reading: the science suggested PFAS were a serious problem well before the regulation arrived. EPA's process produced a regulation that is durable, evidence-based, and designed to survive challenge — but the process took years to traverse. For most of those years, public water systems were under no federal monitoring or treatment obligation for PFAS, even where exposure was occurring. Communities in the Cape Fear River basin in North Carolina dealt with PFAS contamination through state action, lawsuits, and utility-level investment for years before federal MCLs existed.

This is the pattern sometimes described in water-quality advocacy as "the conservative position turned out to be the correct position." EWG and other advocacy groups were publishing PFAS guidelines substantially lower than EPA's existing health advisories for years before EPA's final rule. The eventual federal MCLs validated the direction of those earlier guidelines. The PFAS case does not mean EPA was wrong to take the time it took — the rule it produced is more defensible because of the process — but it does mean that "the contaminant is not yet regulated" is not the same as "the contaminant does not pose a risk." The two states of the world can coexist.

How to read your water's situation against EPA standards

For a municipal water customer, the practical guide:

• Your utility's Consumer Confidence Report shows monitoring data for regulated contaminants, compared against the relevant MCL or Action Level. Contaminants below their MCL are within the federal legal standard. Contaminants above the MCL trigger violation notification, which you should have received separately.
• "Below the MCL" is the federal legal standard, but it is not necessarily the level associated with the lowest measurable health risk. For carcinogens with an MCLG of zero, the gap between the result and zero is the residual risk margin under the regulatory framework.
• Some contaminants of concern may not appear on the CCR because they are not regulated. PFAS will appear on CCRs going forward as compliance with the 2024 rule rolls out, but for older monitoring data, PFAS may simply not have been tested.
• Premises plumbing can introduce contaminants not captured by utility monitoring. Lead from older solder, copper corrosion in acidic water, and contaminants from point-of-use connections are tap-level concerns the CCR cannot fully address.

For a private well owner, the practical guide is similar but starts differently:

• EPA standards do not legally apply to your well, but they are useful benchmarks for evaluating your test results.
• A well water test result compared against the relevant MCL tells you whether your water meets the level that would be required of a regulated utility. A result below the MCL is within the federal standard; a result above the MCL means your water would be in violation if it came from a public water system.
• The same caveats apply: meeting the MCL is not the same as meeting the MCLG, and many contaminants are not on the regulated list.

We cover testing in detail in our testing your water article and the distinction between the various kinds of standards in our health-based vs. aesthetic water concerns article.

How to think about the gap

Many readers, having understood the EPA framework, arrive at a real question: my water meets EPA standards, but should I treat it anyway?

The honest answer is that this is a personal risk-tolerance and lifestyle decision, not a question with a single correct answer. EPA's standards represent a feasibility-balanced floor that the regulatory system has determined is achievable across thousands of utilities serving the entire country. A reader looking at their own situation — their household composition, the presence of infants or immunocompromised members, their length of expected residence at the property, their budget, their tolerance for risk-management decisions in other domains — may reasonably conclude that they want to treat below an MCL, treat for unregulated contaminants, or treat the residual gap between the MCL and the MCLG.

A reader may equally reasonably conclude that the EPA standards represent an adequate floor and that no treatment is warranted. Both decisions can be honest readings of the same evidence. The EPA framework does not dictate either answer; it provides the regulatory benchmark against which the question gets framed.

Our companion article on EWG drinking water standards discusses an alternative framework — health-based guidelines without feasibility balancing — and how to read EPA and EWG benchmarks alongside each other. Reading both articles together gives you a more complete picture of the benchmark landscape than either article alone.

When professional input makes sense

Some situations clearly benefit from professional input:

• Your utility's CCR shows a contaminant approaching its MCL and you want to understand your tap-level exposure.
• A specific regulatory development affects your region (the PFAS rule for Cape Fear basin readers, the Lead and Copper Rule Improvements for older housing stock).
• You have an infant, someone who is pregnant, someone who is immunocompromised, or another member of the household whose risk profile differs from a healthy adult.
• You want to compare your CCR data against MCLGs, EWG guidelines, or other benchmarks rather than only against MCLs.
• You're a private well owner whose test results show contaminants near the corresponding MCLs and you want help interpreting the risk and treatment options.

In simpler situations — a clean CCR with all monitored contaminants well below their MCLs, a private well baseline with no concerns — the EPA framework is straightforward enough that professional consultation may not add much.