A business owner reading a utility's Consumer Confidence Report and concluding their building's water is safe is making an assumption the regulation itself does not support. EPA drinking water rules regulate municipal water systems, not individual businesses, and the water a utility certifies as compliant at the treatment plant can pick up additional contaminants crossing a building's own plumbing before reaching a tap.
What the Safe Drinking Water Act Actually Regulates
The Safe Drinking Water Act establishes the EPA's authority to set enforceable standards, called Maximum Contaminant Levels, for public water systems. These standards apply to the utility delivering water to a community, and utilities are legally required to test and report their compliance with them.
The regulation stops at the point where the utility's infrastructure ends, typically the water meter or property line. What happens to the water after that, moving through a building's own pipes, fixtures, and any internal storage, falls outside the utility's regulatory responsibility and outside EPA enforcement.
The Gap Between Utility Compliance and Building Water Quality
This gap matters most for contaminants that originate inside a building rather than at the treatment plant. Lead is the clearest example: a utility can deliver water with zero detectable lead and still have that water pick up lead from pre-1986 solder or fixtures inside an older commercial building. The utility's compliance report reflects the water it delivered, not what a specific building's own plumbing subsequently contributed.
Lead in Drinking Water: What Facilities Managers Need to Know covers this specific gap and how building age determines risk independent of utility performance.
Contaminants Without Federal Regulation
"Regulated" is not one status. Where a contaminant sits on this spectrum determines what protection, if any, federal rules currently provide.
Some contaminants of genuine concern to businesses fall outside the EPA's regulated list entirely, meaning utilities have no compliance obligation regarding them at all. Microplastics are the clearest current example: no federal maximum contaminant level exists, and utilities are not required to test for them. Microplastics in Tap Water: Why Your Business Won't Know for Years covers why this regulatory gap exists and what businesses can do without waiting for a future rule.
PFAS compounds have moved from largely unregulated to actively regulated over the past several years, with the framework continuing to evolve as recently as 2026. PFAS in Drinking Water: What Every Business Needs to Know covers the current state of that regulatory picture.
State and Local Layers
Some states impose additional water quality standards beyond federal EPA minimums, particularly for contaminants with regional relevance, arsenic thresholds in western states with naturally elevated groundwater levels, for instance. Businesses operating in multiple states should confirm whether any state-level requirements apply beyond the federal baseline, since compliance obligations are not uniform nationwide.
What Compliance Actually Requires of a Business
Most commercial businesses have no independent regulatory testing obligation for their own tap water; the compliance burden sits with the utility. This means a business's water quality risk is not something regulation manages on their behalf beyond the treatment plant. The practical response is testing at the building's own taps rather than relying solely on the utility's system-wide report.
Bottleless Nation's free on-site water test establishes what a specific building's water actually contains, independent of what the utility's compliance report shows for the broader system.
Closing the Gap with Point-of-Use Purification
A reverse osmosis purification system installed at the point of use addresses contamination regardless of whether it originated at the treatment plant, in the distribution system, or inside the building's own plumbing. This is the practical answer to a regulatory framework that, by design, does not extend past the property line. How Reverse Osmosis Works for Business Drinking Water covers the specific technology and certification standards.
The full landscape of tap water contaminants businesses should understand, regulated and unregulated, is covered in What's in Your Tap Water and What Businesses Can Do About It.
Related Guides
Frequently Asked Questions
Are businesses legally required to test their own tap water?
Most commercial businesses have no independent regulatory testing obligation for tap water; that responsibility sits with the municipal utility under the Safe Drinking Water Act. This means water quality inside a specific building is not something federal regulation directly monitors on a business's behalf.
If my utility's water is compliant, is my building's water automatically safe?
Not necessarily. EPA regulations apply to what the utility delivers, typically up to the property line or water meter. Contaminants like lead can enter water from a building's own plumbing after that point, meaning utility compliance does not guarantee the same water quality at every tap inside every building it serves.
Are all tap water contaminants regulated by the EPA?
No. Some contaminants, microplastics being the clearest current example, have no federal maximum contaminant level and no required utility testing. Other contaminants like PFAS have moved from largely unregulated to actively regulated in recent years, with the framework still evolving.
Do state regulations ever exceed federal EPA standards?
Yes, in some cases. States can impose additional requirements beyond the federal baseline, particularly for contaminants with regional relevance. Businesses operating across multiple states should confirm state-specific requirements rather than assuming federal minimums are the only applicable standard.