Where the EPA PFAS Drinking Water Rule Stands in 2026

The EPA’s first-ever federal limits for PFAS in drinking water were finalized in April 2024. Two years on, public water systems are deep into the monitoring phase — but the compliance picture is more nuanced than headlines suggest. Here’s what’s actually in force, what’s still pending, and what it means for your tap water.

What the Rule Sets

The April 2024 National Primary Drinking Water Regulation establishes Maximum Contaminant Levels (MCLs) for five individual PFAS compounds plus a Hazard Index for mixtures:

Compound	MCL	Common name / use
PFOA	4 parts per trillion (ppt)	Legacy Teflon manufacturing
PFOS	4 ppt	Scotchgard / firefighting foam
PFNA	10 ppt	Fluoropolymer byproduct
PFHxS	10 ppt	Replacement for PFOS
HFPO-DA (GenX)	10 ppt	Replacement for PFOA
Hazard Index	1.0 (unitless)	Combined exposure to PFNA + PFHxS + HFPO-DA + PFBS

These were set well below the levels at which most utilities had been finding PFAS, which is why so many systems flagged in EPA’s UCMR 5 testing now register as “above MCL.”

The Compliance Timeline (and Where We Are Now)

The rule has two key dates, neither of which is 2026:

• By 2027 — public water systems must complete their initial PFAS monitoring and start reporting results to customers.
• By 2029 — systems that exceed an MCL must have treatment in place to bring concentrations below the limit.

So as of mid-2026, large utilities are well into monitoring. Most are not yet under any legal obligation to have removed PFAS — that deadline is still about three years away. A “reading above 4 ppt PFOA” today is a flag that treatment will be needed before 2029, not a current legal violation.

The 2025 Reconsideration

In May 2025 EPA announced it would keep the PFOA and PFOS limits in place, but signaled an intent to rescind the MCLs for PFHxS, PFNA, HFPO-DA, and the Hazard Index, and to revisit the rest of the regulatory framework. As of this writing, that reconsideration is in progress.

What that means in practice:

• The 4 ppt limits for PFOA and PFOS are stable — utilities are planning around them.
• The 10 ppt limits and Hazard Index for the other four compounds are likely to be revised, though the final outcome is still being worked out.
• State-level rules in places like Michigan, New Jersey, Massachusetts, and Vermont are unaffected by the federal reconsideration; some are stricter than the federal MCLs.

What Utilities Are Doing Right Now

Even though the treatment deadline is 2029, large utilities aren’t waiting:

1. Monitoring — quarterly sampling for the regulated PFAS at the entry point to the distribution system, with results reported in annual Consumer Confidence Reports.
2. Source assessments — identifying upstream contamination (military airfields, industrial sites, fluorochemical manufacturers) so source-control or alternate-source decisions can be made.
3. Treatment evaluations — pilot-testing granular activated carbon (GAC), anion exchange, and reverse osmosis to figure out what fits each utility’s flow rate and budget.
4. Capital planning — rate-setting and bond financing for treatment build-outs that often run into tens of millions of dollars per medium-sized system.

Smaller systems (serving under 10,000 people) generally have until later in the timeline to comply.

What This Means for You

If your ZIP code shows PFAS detected:

• It’s not an emergency. PFAS health risks accumulate over years of exposure, not days. There is time to make an informed decision rather than a panicked one.
• Read your annual Consumer Confidence Report. Your utility is required to send or post this once a year, and the most recent one should include PFAS data. It’s the most authoritative local source.
• Use a certified filter if you want to act now. A reverse osmosis system (NSF/ANSI 58 certified) or a carbon block filter certified to NSF/ANSI 53 for PFOA/PFOS will reduce levels at the tap to well below the MCL, regardless of what your utility is doing upstream. See our filter reviews for tested options.
• Keep an eye on your utility’s progress. Most large utilities now publish their PFAS treatment plans on their websites or in board meeting materials.

What the Rule Doesn’t Cover

A few important limits worth being aware of:

• Private wells are not covered. If you’re on a well, you’re responsible for your own testing — labs that run EPA Method 537.1 typically charge $300–$500.
• Only 5 of the ~29 PFAS tested in UCMR 5 currently have any federal limit. The other 24 are unregulated, even though several are suspected health concerns. Our PFAS compound guide covers what’s known about each.
• Bottled water is regulated by FDA, not EPA. FDA has not adopted equivalent PFAS limits, and independent testing has detected PFAS in many brands.

The Bottom Line

The 2024 PFAS rule is real, it’s in effect, and utilities are taking it seriously — but the binding treatment deadlines are still in 2029, and the regulatory edges are still being worked out. UCMR 5 monitoring data tells you what’s been detected in samples; it doesn’t say a utility is currently breaking the law.

The most useful thing you can do is check your ZIP code to see what’s actually in your local data, then decide whether you want to wait for utility-level treatment or filter at the tap. Both are reasonable choices.

---

Sources: EPA PFAS Drinking Water Regulation, EPA PFAS Rule Implementation, Federal Register Final Rule (April 2024), and ATSDR PFAS clinical guidance.