How to Read Your Water Quality Report (CCR), Step by Step

What the report is and who has to send one

If your water comes from a public utility, you get an annual drinking water quality report called a Consumer Confidence Report, or CCR. Federal rules make every community water system prepare one and get it to customers each year by July 1. A community water system is, broadly, any system serving at least 25 year-round residents or with at least 15 service connections, which covers most cities, towns, homeowners associations, and mobile home parks. So if you are on city water, this almost certainly means you.

The report covers last year's data. It tells you where your water comes from, which regulated contaminants showed up and at what levels, how those levels stack up against the legal limits, and any violations or required public notices. It is not a sales pitch; the EPA sets the content and format.

If you rent, or you never saw a mailer, do not worry: the report is almost always posted on your utility's website, and the EPA keeps a lookup to find your provider. If you are on a private well, no one sends you a CCR, and the testing rules later in this guide are the ones that apply to you instead.

Finding your report

Start with the name of your water utility, which is usually printed on your water bill. Search that name plus 'Consumer Confidence Report' or 'water quality report' and the current year. Most utilities post a PDF.

If you cannot turn up the utility name, the EPA's CCR information page links to tools for locating your system. One scheduling note: under newer rules taking effect for reports due in 2027, larger systems serving more than 10,000 people will send a report twice a year, but the July 1 annual report stays the baseline for everyone.

Once you have the PDF, do not read it cover to cover; you will drown in definitions. Skip straight to the table of detected contaminants. That table is where the useful information lives, and most of the rest is boilerplate you can ignore.

The four terms that unlock the table

Learn these four and the table opens up. The first is MCL, the Maximum Contaminant Level, which is the highest amount of a contaminant legally allowed in drinking water. It is enforceable, so if a system goes over an MCL, that is a violation and triggers public notice.

The second is MCLG, the Maximum Contaminant Level Goal: the level at which there is no known or expected health risk. It is a goal, not a law, and it is often set lower than the MCL, sometimes at zero. The two differ because the MCL is set as close to the goal as today's treatment can practically reach. So a result sitting right at the MCL is legal, but it is not the same as being at the health goal.

The third is the action level, which applies to a few contaminants, most notably lead and copper, that get handled by treatment rather than a fixed MCL. The lead action level is 0.015 mg/L, also written as 15 parts per billion. If more than 10 percent of sampled taps go over it, the system has to take corrective steps. Read it as a trigger for action, not a safe line, because there is no level of lead considered safe.

The fourth is detection, or the detected level, which is simply what the lab measured, usually given as a range and a yearly average. That detected number is the one you hold up against the MCL or action level.

Spotting a number that should get your attention

Read each row left to right: detected level, then MCL (or action level), then MCLG. A detected level above the MCL or action level is the clearest red flag, and the report has to explain any exceedance and what is being done about it.

The near-misses matter just as much, and they are easy to skim past. A detected level sitting close to the MCL is legal, but note it, because yearly averages hide spikes and your home's plumbing can add contaminants after the water leaves the plant. Lead is the classic case: the utility can pass its action level system-wide while your specific tap, fed by an old lead service line or brass fixtures, runs higher.

Also look for contaminants where the MCLG is zero or far below the MCL, like certain disinfection byproducts or, increasingly, PFAS. A detected level that is well under the legal MCL but well above the health goal is a perfectly reasonable thing to want to reduce, even when the utility is fully in the clear. The report tells you what is legal; it does not always tell you what you would rather drink.

What the CCR does not cover

Here is the limit to keep in mind: the CCR reports data from the utility's system, usually measured before the water reaches your home. It does not measure your tap. Lead and copper especially get picked up from household plumbing and service lines after the water leaves the main, so a clean system-wide report is not a promise about your specific faucet.

Newer or unregulated contaminants may not show up at all if there is no monitoring requirement yet. The federal PFAS drinking water rule sets limits for several PFAS, with PFOA and PFOS held to 4 parts per trillion, but monitoring and compliance phase in over several years, so an older report can show no PFAS data even where it is present.

So treat the CCR as your starting point, not the last word, on what is actually coming out of your tap. When you want the real answer for your own faucet, that is what home testing is for.

If you are on a private well

If you are on a well, the CCR rules skip you entirely, and so does EPA regulation. No one tests your water for you and no one mails you a report. Testing and treatment are all on you, which means as a well owner you have to be more active than a city customer, not less.

A sensible baseline is to test once a year for total coliform bacteria and nitrate, plus whatever is common in your area: arsenic, lead, fluoride, manganese, pesticides, or PFAS depending on local geology and land use. Use a state-certified laboratory; your state or county health department usually keeps a list and sometimes offers subsidized test kits. Test more often if the taste, color, or smell changes, after flooding, or if a possible source of contamination turns up nearby.

When the well results come back, read them the way you would read a CCR table: line up each measured level against the EPA's national primary drinking water standards. Those give you the same MCL and action level reference points, even though no one is enforcing them on your well.

Turning a finding into the right filter

Now that you know what is actually in your water, match the specific contaminant to a specific NSF/ANSI certification instead of buying on general claims. The certification, not the format, is what tells you a product was verified to reduce that exact substance.

Use this as your shopping key. For lead, look for a product certified to NSF/ANSI 53 for lead reduction. For taste, odor, and chlorine, NSF/ANSI 42 covers aesthetic effects. For emerging contaminants like some pharmaceuticals and pesticides, look for NSF/ANSI 401. For PFAS, look for a PFAS reduction claim under Standard 53 or Standard 58. For dissolved contaminants like nitrate, arsenic, or fluoride, a reverse osmosis system, which pushes water through a fine membrane, certified under NSF/ANSI 58 is the usual answer, and you confirm the specific claim for your contaminant.

Read the product's certified claims, not the box copy. A filter certified for lead is not automatically certified for PFAS or nitrate. If you cannot find a certification listing for the contaminant your report or test flagged, treat the marketing claim as unproven and keep looking.