The U.S. Environmental Protection Agency (EPA) is the primary federal agency responsible for regulating tap water in the United States. Congress gave the EPA this authority through the Safe Drinking Water Act, originally passed in 1974 and amended in 1986 and 1996. The EPA sets national health-based standards that limit the levels of more than 90 contaminants in public drinking water, covering everything from bacteria and viruses to heavy metals and industrial chemicals.
But the EPA doesn’t do it alone. The actual day-to-day oversight of your local water system almost certainly falls to your state government, and your water utility itself is responsible for testing, treating, and delivering safe water to your tap. Here’s how that layered system works.
The EPA Sets the National Standards
Under the Safe Drinking Water Act, the EPA establishes legally enforceable limits for contaminants that can be present in drinking water. These are called National Primary Drinking Water Regulations, and they cover both naturally occurring substances (like arsenic and radium) and man-made pollutants (like pesticides and industrial solvents). For each regulated contaminant, the EPA sets a maximum allowable level based on what’s protective of human health and achievable with the best available water treatment technology.
The EPA also sets non-enforceable health goals, which represent the level of a contaminant below which there’s no known or expected health risk. These goals are sometimes set at zero for cancer-causing chemicals, even when it’s not technically possible to remove every trace. The enforceable limits are then set as close to those goals as current treatment technology allows.
States Handle Most of the Enforcement
While the EPA writes the rules, most states take over the job of enforcing them through a system called “primacy.” A state earns primacy by demonstrating it can match or exceed the EPA’s standards and has the tools to hold water systems accountable. Nearly every state has primacy over its own drinking water program.
To qualify, a state must adopt contaminant regulations at least as strict as the EPA’s, maintain an inventory of all public water systems, run a program of sanitary inspections, certify the laboratories that test water samples, and have real enforcement teeth. That includes the authority to enter and inspect water system facilities, require record-keeping, compel public notification of violations, and impose civil or criminal penalties. States have two years after the EPA releases a new regulation to incorporate it into their own programs.
Some states go further than the federal minimums. California, for example, regulates certain contaminants that the EPA does not, and several states have set tighter limits for chemicals like PFAS. If you’re curious about who specifically oversees your water, it’s your state’s drinking water program, typically housed within the state’s department of environmental quality or health department.
Your Water Utility Does the Daily Work
Your local water utility, whether it’s a city department, a regional authority, or a private company, is responsible for the actual treatment, testing, and delivery of your tap water. Utilities must regularly sample their water for the full list of regulated contaminants and report the results to the state.
They’re also required by federal law to send you an annual water quality report, sometimes called a Consumer Confidence Report. This document must describe the source of your water (river, lake, groundwater), list the contaminants detected, compare those levels to the legal limits, and explain in plain language what the risks are, if any. Systems serving more than 100,000 people must also develop plans to make these reports accessible to customers with limited English proficiency. Most utilities now post these reports online, so you can look yours up anytime.
Private Wells Are a Major Exception
If your home gets water from a private well rather than a public system, the regulatory picture changes dramatically. Private domestic wells are not covered by the Safe Drinking Water Act, and most state governments don’t regulate them either. That means no one is required to test your water or ensure it meets any safety standard.
Roughly 23 million U.S. households rely on private wells. If you’re one of them, the responsibility for testing and treating your water falls entirely on you. The EPA recommends annual testing at a minimum, particularly for bacteria, nitrates, and any contaminants common in your region. Some counties require well water testing at the time of a home sale, but ongoing monitoring is up to the homeowner.
Bottled Water Falls Under a Different Agency
Bottled water is not regulated by the EPA. It’s classified as a packaged food product and falls under the authority of the U.S. Food and Drug Administration (FDA). The FDA requires bottled water companies to protect their water sources, test their products, and follow safety rules, but the testing frequency and public reporting requirements are less extensive than what public water systems face. Your tap water is actually tested far more often than the bottled water you buy at the store.
New Rules for PFAS and Lead
The regulatory landscape for tap water continues to expand. In 2024, the EPA finalized the first-ever national limits on PFAS, a group of synthetic chemicals sometimes called “forever chemicals” because they persist in the environment and the human body. The new rule sets enforceable limits of 4 parts per trillion for PFOA and PFOS, the two most studied PFAS compounds, and 10 parts per trillion for three additional PFAS chemicals. It also regulates certain mixtures of PFAS using a combined hazard scoring system. These are extraordinarily low limits, reflecting both the health concerns around PFAS and advances in water treatment technology.
The EPA also issued updated rules for lead in drinking water. The Lead and Copper Rule Improvements, finalized in late 2024, require water systems nationwide to identify and replace lead service lines within 10 years. The updated rule also lowers the threshold that triggers mandatory action when lead is detected and requires more rigorous testing at the tap. Lead pipes remain a significant source of exposure in older cities, and this rule is the most aggressive federal effort to date to eliminate them from the water supply.
What Happens When a System Violates the Rules
When a water system fails to meet standards, the enforcement response typically starts at the state level. States can issue compliance orders, require the system to notify customers, mandate corrective action, and levy fines. If a state fails to act, or if the violation is severe enough, the EPA can step in directly. Federal enforcement tools include compliance orders, civil lawsuits, and penalties that can reach $25,000 per day for each ongoing violation.
Water systems are also required to issue public notices when they violate a standard or fail to complete required testing. These notices must go directly to customers and explain what happened, what health risks may be involved, and what steps are being taken to fix the problem. If you’ve ever received a boil-water advisory or a notice about elevated lead levels, that’s this system at work.