If you're holding your utility's annual report and not sure what to do with it, you're not alone. The format hasn't changed much since 1996.
Every community water system in the U.S. is required by the EPA's Safe Drinking Water Act to publish an annual Consumer Confidence Report (CCR). It lists the contaminants the utility tested for, the levels they found, and how those compare to the EPA's legal limits. It does not, by design, tell you whether the water that ends up in your glass is safe — only whether the utility is in compliance. Those are two different questions.
This guide walks through what's actually in the report — the structure, the abbreviations, the asterisks — and what to do with the parts that matter. If you'd rather skip the PDF, your zip-code data is one click away.
Faster than reading the PDF
Look up your tap water by zip code.
We pulled the EWG Tap Water Database into a zip lookup so you can see what's in your local water without reading a 30-page report. Same source data the EPA points to.
What's NOT epic in your water? →
The four parts of the report that matter
Four sections every Consumer Confidence Report has — and what each one tells you.
The CCR is a long PDF, but most of it is boilerplate. The information that actually matters lives in four specific sections. Here's where to look, what to look for, and what the answer means.
Because the EPA requires utilities to publish what they found.
The "Detected Contaminants" table · The single most-skipped, single most-important section
What it is
Every CCR contains a multi-column table listing the regulated contaminants the utility tested for and the levels they detected. Typical columns: contaminant name, units (ppm, ppb, ppt, mg/L), the highest level detected, the range across samples, the EPA's MCL, the EPA's MCLG, and the likely source. This is the single most important section of the report and the one most readers skip because the column headers aren't explained until page 6.
How to read it
Scan down the "Highest Level Detected" column and compare to the MCL column. Anything close to or above the MCL is what to focus on. Pay special attention to lead, arsenic, nitrates, trihalomethanes, and PFAS (if listed) — those tend to be the contaminants with the smallest gaps between "legal" and "health-protective."
~30+
Regulated contaminants typically tested. The EPA regulates about 90 drinking-water contaminants. Most utilities test for 30+ in any given report — but hundreds of unregulated contaminants don't appear at all.
Source: EPA National Primary Drinking Water Regulations; EPA Consumer Confidence Reports Rule.
Because legal limits and health-protective limits aren't the same number.
MCL, MCLG, AL · The acronyms that hide the most important fact in the report
What the acronyms mean
MCL — Maximum Contaminant Level. The legally enforceable limit. The number the utility is required to stay below.
MCLG — Maximum Contaminant Level Goal. The level the EPA considers health-protective with a margin of safety. For some contaminants like lead, the MCLG is zero. The MCL is set higher because zero isn't currently achievable at scale.
AL — Action Level. Used for lead and copper specifically. If more than 10% of household samples exceed the AL, the utility is required to take treatment action. Currently 15 ppb for lead (lowering to 10 ppb under the EPA's 2024 Lead and Copper Rule Revisions).
Why the gap matters
The MCL is what the utility has to meet. The MCLG is what the EPA's own health scientists say is actually safe. For some contaminants those numbers are identical. For others — lead, arsenic, several PFAS compounds — there's a meaningful gap between "legal" and "safe." That gap is where filtering decisions get made.
15 → 0
Lead Action Level vs. lead MCLG. Action Level is 15 ppb. The MCLG (the health-protective goal) is zero. Both numbers come from the same EPA rule — they exist for different purposes.
Source: EPA National Primary Drinking Water Regulations; EPA Lead and Copper Rule Revisions.
Because the asterisks are where the real story is.
"ND," range vs. average, sample year disclosures · The fine print that changes interpretation
What to look for
Footnotes in CCRs do a lot of work. Common things to check: "ND" means non-detect (below the lab's reporting limit, not absolute zero). "Average vs. Range" matters because a low average can hide a high single sample. Sample year disclosures can be older than you'd think — some less-frequent contaminants are sampled every 3 to 9 years, and the report may be reusing data. "Below the MRDL" applies to disinfectants like chlorine and chloramine. "TT" (treatment technique) means a technique-based standard rather than a numeric limit.
The big one
Look for any contaminant where the "Range" column shows a maximum that exceeds the MCL even though the average doesn't. That means at least one household sampled tested above the legal limit during the year — even if the utility is technically in compliance on average. Lead and disinfection byproducts are the most common offenders.
3 + 9
Years between samples for some contaminants. Many regulated contaminants are tested every 3 years; some on a 9-year cycle. The number in this year's CCR may not be from this year.
Source: EPA Standardized Monitoring Framework; EPA CCR Rule Quick Reference Guide.
Because reading the report is the start, not the end.
Filter what's worth filtering · Take the EPA's own recommendation
The decision tree
If a contaminant is above the MCL: The utility is required to notify customers and explain corrective action. You should follow up with them. In the interim, point-of-use filtration certified to the appropriate NSF/ANSI standard is the EPA's recommended approach.
If a contaminant is at or close to the MCL but below it: Technically compliant, but functionally elevated. Filter for it. The EWG flags these as the gap between "legal" and "health-protective" — and they're the most common reason households end up with home filtration.
If a contaminant is in the report but well below the MCL: Not a priority. The MCLG is the better benchmark; if you're below the MCLG, you're at health-protective levels for that contaminant.
If you're concerned about something not in the report: Get a comprehensive home water test from a state-certified lab. The CCR doesn't cover unregulated contaminants like most pharmaceuticals, microplastics, and many emerging PFAS compounds.
NSF 53
The EPA's filter recommendation for lead. A point-of-use filter certified to NSF/ANSI Standard 53 is what the EPA names specifically for households with lead-pipe plumbing risk. Pure XP is independently tested against that standard with 99.94% reduction.
Source: U.S. EPA Basic Information about Lead in Drinking Water; EPA CCR Rule.
Frequently asked questions
What is a Consumer Confidence Report?
A Consumer Confidence Report (CCR) is the annual water quality report that every U.S. community water system is required to send to its customers by July 1 each year. It's mandated by the EPA's Safe Drinking Water Act and lists the regulated contaminants detected in your tap water over the previous calendar year, the EPA's limits, and how the utility's results compare.
How do I find my CCR?
Three options: (1) Your utility mails or emails it annually — usually around June or July. (2) The EPA's CCR locator at epa.gov lets you search by zip code. (3) Most utilities publish the current CCR on their website. If you rent, your landlord or property manager may also have a copy. Or use our zip-code lookup for a faster summary.
What's the difference between MCL and MCLG?
MCL stands for Maximum Contaminant Level — the legally enforceable EPA limit. MCLG stands for Maximum Contaminant Level Goal — the level below which there is no known or expected risk to health, with a safety margin. MCLG is the health-protective number; MCL is the achievable number. For some contaminants like lead, the MCLG is zero, but the MCL is set higher because zero isn't currently achievable at scale. The CCR usually shows both columns side by side — and the gap between them is where most filtering decisions live.
What's an Action Level?
An Action Level (AL) is used specifically for lead and copper. It's a threshold that, when exceeded by more than 10% of household samples, requires the utility to take treatment action. The current lead Action Level is 15 parts per billion (ppb). The EPA's Lead and Copper Rule Revisions are lowering it to 10 ppb. Either way, the Action Level is far above what the EPA and CDC consider health-protective for children.
What does "ND" mean in the CCR table?
ND means non-detect — the contaminant was either not found or was below the laboratory's reporting limit. It does not mean the contaminant is absolutely zero, just that it's below what the lab method can measure. Reporting limits vary by contaminant; for some, the "detection limit" is still meaningfully higher than the health-protective level.
Is being "in compliance" the same as "safe"?
No. Compliance means the utility met EPA's legal limits during the reporting period. Many utilities operate within EPA limits while still delivering water with measurable contaminants — including some at levels above what scientists consider health-protective. The EWG Tap Water Database tracks utilities that are technically compliant but have contaminant levels exceeding health-based guidelines. Compliance is the floor, not the ceiling.
What should I do if my CCR shows a contaminant above the MCL or AL?
First, check whether the violation was acute (immediate health risk) or non-acute (longer-term exposure). The CCR will say. The utility is required to notify customers of acute violations and explain corrective steps. For non-acute exceedances, the recommended action depends on the specific contaminant — but the EPA broadly recommends point-of-use filtration certified to the appropriate NSF/ANSI standard. For lead specifically, that's NSF/ANSI Standard 53. For PFAS, NSF/ANSI P473.
Does the CCR cover everything in my water?
No. The CCR only covers contaminants the EPA regulates and requires utilities to test for. Hundreds of contaminants of emerging concern — pharmaceuticals, many PFAS compounds, microplastics, and most personal-care chemicals — are not federally regulated and therefore not in the CCR. The EPA also doesn't currently regulate residential plumbing — so lead from your home's pipes isn't in the utility's report.
