Quick Answer: Your water quality report — officially a Consumer Confidence Report (CCR) — is a legally required annual disclosure that every U.S. community water system publishes by July 1, covering the previous year’s test results. The two columns that matter most are MCL (the enforceable legal limit) and MCLG (the health-based goal, often zero for contaminants like lead), and reading the gap between them tells you more than the “no violations” headline usually does. Lead specifically uses a 15 ppb action level instead of an MCL — dropping to 10 ppb on November 1, 2027 — and most 2026 reports still won’t show PFAS results at all, since utility monitoring for those isn’t required until April 2027.
If you’ve never actually opened your utility’s annual mailer (or electronic notice) past the “no violations found” summary line, the report itself has real, specific numbers worth reading — and a few gaps worth knowing about.
What a CCR actually is
The Consumer Confidence Report rule requires every community water system serving 25 or more people or 15 or more service connections to publish an annual report by July 1, covering water quality data from the previous calendar year. Utilities can mail it, include it with a bill, or (increasingly) deliver it electronically, which is the main reason a lot of people never realize they’re getting one at all. Starting in 2027, systems serving more than 10,000 people will move to twice-a-year reporting, adding a mid-year update specifically covering lead results and any new violations.
The columns that matter: MCL vs. MCLG
Every contaminant row in a CCR table typically lists five things: the contaminant name, the amount detected, a range (the low-to-high spread across sampling points), the MCL, and the MCLG.
| Term | What it means | Enforceable? |
|---|---|---|
| MCL (Maximum Contaminant Level) | The highest concentration legally allowed in delivered water — set as close to the MCLG as feasible using best available treatment technology, factoring in cost | Yes |
| MCLG (Maximum Contaminant Level Goal) | The purely health-based target, with no cost or feasibility limit — often zero for contaminants with no known safe threshold | No, it's a non-enforceable goal |
The gap between the two is the real story. If a contaminant’s MCLG is zero and your report shows any amount detected at all, that’s the EPA telling you no level is considered fully risk-free — even though the number you’re looking at is legally compliant. “No violations” on the summary page only means every result stayed under the MCL column, not the MCLG one.
Lead: action level, not MCL
Lead and copper don’t get a standard MCL — they use an action level of 15 parts per billion (ppb) for lead, based on the 90th-percentile result across sampled homes (rank every sample high to low; the action level is the threshold where 10% of results sit above it). The MCLG for lead is zero. “Below the action level” means under 15 ppb, not zero — and per the EPA’s Lead and Copper Rule Improvements, that threshold drops to 10 ppb starting November 1, 2027, a tightening most utilities are already preparing for. Because lead contamination overwhelmingly comes from a home’s own service line, old solder, or fixtures rather than the water leaving the treatment plant, a clean CCR doesn’t rule out an elevated-lead problem specific to your house — see our best water filter for lead guide if your home has lead service lines or was built before 1986.
Disinfection byproducts: TTHM and HAA5
Chlorine and chloramine disinfection, while essential for killing pathogens, produces byproducts as a tradeoff — the two your CCR will list are Total Trihalomethanes (TTHM, MCL 80 ppb) and Haloacetic Acids (HAA5, MCL 60 ppb). These tend to run higher in summer, when warmer water and longer residence time in the distribution system push disinfection byproduct formation up, so a midsummer sample can legitimately read higher than a winter one from the same system without indicating anything has gone wrong.
PFAS: why most 2026 reports won’t show it yet
PFAS (“forever chemicals”) get their own timeline, separate from the rest of the report. Under the EPA’s 2024 PFAS drinking water rule, utilities have until April 2027 to complete initial PFOA/PFOS monitoring, and the compliance deadline for actually treating water down to the rule’s 4 parts-per-trillion limit was extended — via a May 2026 Federal Register rule — from April 2029 to April 2031 for systems that request the extension. The exception: any utility that already did EPA’s UCMR 5 sampling round in 2025 is required to include those results in this year’s CCR. In practice, most 2026 reports simply won’t have a PFAS line yet, and that absence is a reporting-timeline gap, not a clean bill of health — see our best water filter for PFAS guide if you want to filter for it regardless of what your CCR shows.
Check your own tap, not just the utility average
A CCR reports system-wide averages and sampling-point ranges — it can't tell you what's actually coming out of your specific faucet, especially for lead, which usually originates in a home's own plumbing rather than the utility's water. A test strip kit is the fastest way to check your own tap between full lab tests.
Check price on Amazon →Once a test flags something worth acting on, Prime shipping gets a certified filter or a full test kit to your door in two days instead of a week. Try Prime free for 30 days.
What the report doesn’t cover
A CCR only reports what the utility measures at the treatment plant and within the distribution system, up to the water main. Everything past that point — your home’s service line, interior plumbing, solder joints, and the fixture itself — is explicitly outside the report’s scope. That’s exactly where lead contamination most often originates, which is why full legal compliance on paper and an elevated-lead result at a specific kitchen faucet aren’t contradictory. If you’re on a private well instead of a public water system, none of this applies to you at all — wells aren’t covered by the Consumer Confidence Report rule, and testing is entirely on the homeowner; see our well water testing guide instead.
How to find your report
Utilities increasingly deliver CCRs electronically rather than by mail, so it’s easy to have gotten one without noticing. Try EPA’s CCR lookup tool, search “[your utility name] consumer confidence report” (most post a PDF directly on their site), or call your utility’s customer service line — they’re required to provide a copy on request even when you can’t find it online.
The bottom line
Your annual water quality report is required by law, published by July 1, and worth reading past the “no violations” summary line — specifically the MCL-vs-MCLG gap, the lead action level (15 ppb now, 10 ppb from November 2027), and whichever disinfection byproduct numbers your utility lists. Don’t expect a PFAS line yet; that reporting requirement doesn’t fully kick in until 2027. And remember what it can’t tell you: anything happening in your home’s own plumbing after the water leaves the main. For that, pair the report with your own test — see our best water test kit guide — and our NSF certifications explained guide for how filter performance claims relate to the same MCL numbers your CCR uses.
Figures above reflect 2026 EPA rules and deadlines; check your utility’s specific report for your local results.