Small Water System CCR Compliance: Your 2027 Guide for Utilities Under 10,000 Served

By Andy Zhang. Last reviewed 2026-04-18.

There are roughly 45,000 small community water systems in the United States. According to EPA's Safe Drinking Water Information System (SDWIS), small community water systems (CWSs) — those serving 10,000 people or fewer — make up the overwhelming majority of regulated drinking-water utilities in the country. They are also the utilities with the fewest compliance staff, the smallest budgets, and the least appetite for enterprise SaaS. And they are the ones the 2027 Revised CCR Rule (published at 89 FR 45980, Federal Register docket EPA-HQ-OW-2022-0260) affects most visibly, because every one of them has to publish a Consumer Confidence Report (CCR) under the same federal framework at 40 CFR §141.153 as Dallas Water Utilities.

We talk to small-utility operators every week, and the pattern is consistent: they know the CCR obligation exists, they are doing their best with a Word template or a state iWriter variant, and they are not sure which of the 2027 changes actually apply to them. This page is the honest walk-through we wish existed. It covers what counts as a small system, what the revised rule changes for you, what it does not change, the minimum-viable compliance path, and the free and low-cost resources that exist specifically for small-system compliance — including federal grant dollars most operators don't know about.

What counts as a small water system

EPA uses population served to classify drinking-water systems. A community water system (CWS) is a public water system that serves at least 15 service connections used by year-round residents or regularly serves at least 25 year-round residents. That 15-connection / 25-resident threshold is where the CCR obligation starts — below it you are not a CWS, and the CCR rule at 40 CFR Part 141 Subpart O does not apply to you.

Above that floor, EPA further subdivides CWSs by population served:

• Very small: 25 to 500 people served
• Small: 501 to 3,300 people served
• Medium: 3,301 to 10,000 people served
• Large: 10,001 to 100,000 people served
• Very large: 100,001 or more people served

For the 2027 CCR Rule, the practical dividing line is 10,000. Systems serving 10,000 or fewer people are what we mean by "small" in this guide, and they stay on an annual CCR cadence. Systems serving 10,000 or more move to twice-yearly distribution under 40 CFR §141.155(j)(2) — the second of the two annual deliveries must be completed by December 31 of the reporting year.

Size-bucket threshold matrix

What actually changes at each size bucket under the 2027 rule:

Bucket	Population served	CCR delivery cadence	Direct-URL e-delivery	Per-customer tables	Typical compliance path
Very small	25–500	Annual (by July 1)	Required if using e-delivery	Rarely triggered (single source)	EPA iWriter + state template; printed mailer
Small	501–3,300	Annual (by July 1)	Required if using e-delivery	Rarely triggered	EPA iWriter or state template; Circuit Rider / RCAP help
Medium	3,301–10,000	Annual (by July 1)	Required if using e-delivery	Possible (multi-source / blending)	EPA iWriter viable; commercial tool often cheaper than staff time
Large	10,001–100,000	Biannual — second delivery by Dec 31 (§141.155(j)(2))	Required if using e-delivery	Expected (multi-zone)	Commercial CCR platform + primacy-agency coordination
Very large	100,001+	Biannual — second delivery by Dec 31 (§141.155(j)(2))	Required if using e-delivery	Expected (multiple pressure zones / source blends)	Enterprise CCR + GIS + customer-notification stack

The 10,000 line is inclusive on the biannual side: utilities serving 10,000 or more fall into the twice-yearly bucket. If your service population is exactly 10,000, you are a biannual-distribution system under the revised rule.

A related term worth clarifying: non-community water systems (non-transient non-community systems like schools and workplaces, or transient non-community systems like campgrounds) are not subject to the CCR rule at all. CCR is a community-water-system obligation. If you're running a non-community system, you have other reporting obligations but not this one.

2027 CCR Rule changes that hit small systems hardest

The Revised CCR Rule was finalized in the Federal Register in May 2024 and the substantive changes take effect for the first reporting year that begins in 2027. For small systems, three of the changes matter more than the rest.

Direct-URL electronic delivery. The revised rule formalizes electronic delivery as an acceptable primary delivery method, but it specifies that e-delivery must land customers directly on the CCR — not on a utility homepage with a link buried three clicks in, not on a PDF behind a portal login, not on a landing page that says "click here for the report." The URL you give customers has to open the current CCR immediately. For utilities who've been emailing customers a link to their homepage and calling it done, this is a real change. For utilities who already host the CCR as a standalone web page, the new rule mostly codifies what you were doing. Our CCR electronic delivery page walks through the specifics.

Spanish translation threshold. The revised rule expands language-access requirements. If the service area contains a significant non-English-speaking population for any given language (EPA's threshold triggers at roughly 10% of the service area or 1,000 persons in that language group, whichever is less), the utility must provide either a translated CCR or contact information for assistance in that language. Spanish is the most common trigger in the US, but the rule is language-neutral — it applies to any language that meets the threshold. See CCR translation and accessibility for the full breakdown.

Per-customer contaminant tables. The old rule allowed aggregated system-wide tables. The revised rule expects customer-level relevance: if your system has multiple sources or pressure zones with materially different detected-contaminant profiles, the CCR a customer receives has to reflect what's actually coming out of their tap, not a system-wide average. For a single-source small CWS this is a non-issue. For a small system that blends a primary well with a wholesale purchase during peak demand, it's worth a conversation with your state primacy agency about what the disclosure needs to look like.

One thing to note carefully: twice-yearly distribution applies to systems serving 10,000 or more people (the 10,000 line is inclusive — if you serve exactly 10,000, you are a biannual-distribution system). We see this misreported constantly. If you serve fewer than 10,000, you are still on annual distribution under the revised rule. The biannual requirement, with the second delivery due by December 31 per §141.155(j)(2), is a large-system obligation.

What hasn't changed for small systems

It's easy to read about the 2027 changes and assume the whole framework was rewritten. It wasn't. The core compliance structure for small systems is almost identical to what it has been since the original 1998 rule.

• Annual delivery by July 1. The CCR covering the prior calendar year must be delivered to customers by July 1 of the following year. Deadline unchanged.
• Content requirements under 40 CFR 141.153. Required elements — water source information, detected contaminants with MCL and MCLG comparisons, health-effects language for violations, educational statements about vulnerable populations — are the same content framework small systems have been working from for two decades.
• Delivery certification to the state primacy agency. You still have to certify to your state that the CCR was delivered to customers, typically within 90 days after the July 1 distribution deadline. The form and channel vary by state, but the obligation itself is unchanged.
• Three-year archive. You still have to keep CCRs on file for at least three years and make them available on request. The revised rule formalizes this for hosted online CCRs, but the underlying retention obligation isn't new.

If you were compliant under the 1998 rule, roughly 80% of what you already do carries forward. The 2027 work is at the delivery method, language access, and per-customer relevance — not at the content you're already generating.

Compliance path: the minimum viable CCR

For a small CWS with clean compliance, the 2027 path reduces to five concrete steps. This is the minimum — not an aspirational workflow.

1. Pull your water-quality data. Export detected-contaminant results for the reporting year from your state primacy agency's drinking-water database (most states offer a LIMS export or a self-service download), plus any lab results you've paid for independently. You need the full detection profile with MCL comparisons, MCLG values, and health-effects flags for any violation-level exceedances.
2. Build the disclosure. Use EPA's CCR iWriter (free, hosted at sdwis.epa.gov), your state primacy agency's template, or a commercial tool to assemble the required content sections. At the minimum this includes source information, detected contaminants in the §141.153-mandated table format, required educational language, violation disclosures if any, and contact information for follow-up.
3. Get a direct URL. If you are going the electronic-delivery route, the CCR needs a permanently resolvable public URL that opens directly on the report. This can be a page on your utility website, a hosted URL from a CCR tool, or a state-primacy-agency portal if your state offers one. It cannot be a PDF attachment in an email or a link to your homepage.
4. Notify customers. Deliver the CCR or the direct-URL notice to every bill-paying customer by July 1. For electronic delivery, the notice has to include the URL, a plain-language explanation of what the CCR is, and a way for customers to request a paper copy at no cost. For mailed delivery, the report itself (or a postcard with URL) goes in the envelope.
5. Archive and certify. Keep the CCR and a record of how you delivered it on file for three years. Certify delivery to your state primacy agency on the state's required form, usually within 90 days of the July 1 deadline.

That's the whole workflow for a clean small system. If you had a treatment violation during the reporting year, add the required health-effects notification language and follow your state's public-notice rules on top of this. If you cross a language-access threshold, add the translated variant.

Resources for small systems

Small utilities have more free help available than most operators realize. The problem is that the help is scattered across EPA, state agencies, USDA, and nonprofit technical-assistance providers, so it takes some digging to assemble.

EPA CCR iWriter. Free web-hosted tool from EPA at sdwis.epa.gov/ccriwriter, linked from the EPA CCR program page. Handles the required content sections and produces a printable report. Weaknesses: no direct-URL hosting, weak multi-source blending, essentially no translation support. Good enough for a very-small single-source CWS with clean compliance. For more depth on this path see CCR small utility compliance.

State primacy agency tools. Most states publish their own CCR templates and guidance. Notable examples: the Texas Commission on Environmental Quality provides Drinking Water Viewer access plus TCEQ-formatted CCR guidance; the Wisconsin DNR publishes state-specific CCR templates; and the New Jersey DEP publishes the state CCR guidance aligned with New Jersey's primacy program (we cover New Jersey specifically in revised CCR rule 2027 NJ). Start with your state's drinking-water program before paying anyone.

USDA Rural Development Circuit Rider Program. USDA funds a technical-assistance program where circuit riders — experienced water operators — travel to small rural systems to provide on-site compliance help at no charge to the utility. The USDA Circuit Rider Program serves systems in rural areas with populations under 10,000 and covers CCR assistance as part of its scope. If you're rural and understaffed, this is the most underused resource in small-system compliance.

RCAP (Rural Community Assistance Partnership). RCAP is a national network of six regional nonprofits providing technical, managerial, and financial assistance to rural water systems. RCAP trainers run CCR workshops, provide one-on-one help with state primacy reporting, and help utilities qualify for funding. Their assistance is typically grant-funded and free or low-cost to the utility.

Drinking Water State Revolving Fund (DWSRF). DWSRF provides low-interest loans and, in some cases, forgivable principal (effectively grants) for drinking-water infrastructure and compliance costs. The 2021 Bipartisan Infrastructure Law (Public Law 117-58) expanded DWSRF small-system and disadvantaged-community set-asides, and those BIL-funded allocations are still flowing through state programs on the current capitalization-grant cycle — confirm current-year availability with your state DWSRF office, because set-aside percentages and forgivable-principal caps are revisited each state-program annual report. Eligible costs can include software and systems needed to meet compliance obligations. Application is through your state DWSRF program. This is real grant money, and small systems leave it on the table constantly.

When to buy CCR software vs use free tools

Honest tradeoff time. A small utility has three reasonable paths, and the right one depends on which constraints bind hardest.

Stay free if: you are very small (under 3,300 served), single-source, had no violations in the reporting year, don't cross language-access thresholds, and have a part-time staff member who can spend a week pulling the data and assembling the report. EPA iWriter plus your state template plus a printed mailer works. The tradeoff is staff time and the direct-URL hosting gap — you'll need to solve URL hosting separately, which for very small systems often means the state primacy agency hosts it for you if they offer that.

Buy a tool if: you serve between 3,300 and 10,000, you have any of multi-source blending / language-access triggers / prior compliance issues, you don't have a dedicated clerk who can babysit the workflow, or you want direct-URL hosting handled without building it yourself. At that scale a published-price CCR tool (including our own 1water platform — CCR software pricing starts with a 60-day free trial, then $299 per CCR on the Starter tier) is cheaper than the staff time to run a manual process. CCRiWriter is the historical incumbent in this segment; 120Water is typically overbuilt unless you also have active LCRI lead work.

Broader suite if: you have active Lead and Copper Rule Improvements obligations, a service-line inventory in progress, or a multi-channel public-communications program beyond CCR. See our CCR software guide for the full vendor map.

We'd rather small utilities start free and upgrade than overbuy. The platform-suite quote that drove you to search for alternatives is almost certainly not the right starting point.

Common compliance mistakes small systems make

Every year we see the same five failures. If you avoid these, you're ahead of most small-system peers.

• Late delivery. July 1 is a hard deadline. State primacy agencies enforce it and it's one of the easier violations for them to flag, because the certification form arrives (or doesn't) on a known schedule. If you're running tight, deliver by mid-June and certify early.
• Missing language requirements. Utilities serving Spanish-speaking service areas regularly skip the translation variant because nobody told them they crossed the threshold. Know your service-area demographics. The Census Bureau's American Community Survey publishes language data down to the block-group level.
• Missing archive. Three years of back CCRs need to be on file and available on request. If you switched platforms, migrated websites, or lost a hard drive, go rebuild the archive before the next state audit.
• Not certifying to the primacy agency. Delivery is step one. Certification to the state is step two. Many utilities remember the first and forget the second. Your state will tell you which form and which deadline — usually 90 days after July 1 — and that form is what closes the compliance loop.
• PDF-only when direct-URL is required. Under the revised rule, emailing customers a PDF attachment is not direct-URL delivery. The rule specifies a URL that opens the CCR directly. If your 2027 plan is to email a PDF, read the rule again and adjust the delivery method before the reporting year starts.

FAQ

What's the minimum a small utility has to do for the 2027 CCR Rule?

For a clean single-source CWS serving fewer than 10,000 people: pull your annual detected-contaminant data, assemble the required content under §141.153, get a direct-URL hosted page for the CCR, deliver the notice to every customer by July 1, archive the CCR for three years, and certify delivery to your state primacy agency. That's it. You stay on annual distribution, not biannual (biannual distribution kicks in at 10,000 and up, with the second delivery due by December 31 per §141.155(j)(2)). See our CCR requirements 2027 page for the full checklist.

Do small water systems need Spanish translation?

Only if your service area crosses the language-access threshold — roughly 10% of the service area or 1,000 persons in a single non-English language group, whichever is less. The rule is language-neutral, so Spanish is common but not the only trigger. Check American Community Survey data for your service area at the block-group level. If you don't cross any language threshold, English-only is fine. If you do, the revised rule requires either a translated CCR or, at minimum, contact information in the triggering language for assistance. Full details on CCR translation and accessibility.

Can my state help with CCR compliance?

Yes. State primacy agencies publish CCR templates, guidance documents, and in many states a drinking-water-program technical-assistance line that will answer compliance questions for free. Texas, Wisconsin, New Jersey, Pennsylvania, Maine, and North Carolina all have published small-system CCR resources. Your state is also the agency you certify delivery to, so building a working relationship there pays off on both sides. Start at your state environmental or health department's drinking-water program page. Our utility directory has additional context on state-level oversight.

Is there grant money for small-system CCR compliance?

Yes. The Drinking Water State Revolving Fund is the biggest pool, with low-interest loans and in some cases forgivable principal for small and disadvantaged systems. Costs for software and systems needed to meet compliance obligations are generally eligible. USDA Rural Development provides the Circuit Rider Program free technical assistance (not direct grant money, but staff time worth money) for rural systems under 10,000 served. And RCAP runs grant-funded technical assistance that is free or near-free to the utility. Apply through your state DWSRF program and your regional RCAP affiliate.

What happens if I miss the July 1, 2027 deadline?

A missed CCR delivery is a federal reporting violation under the CCR Rule. State primacy agencies typically respond with a Notice of Violation first, which triggers its own public-notification obligation — ironically, you then have to notify customers that you failed to notify them. Repeated or willful non-compliance can escalate to formal enforcement, administrative orders, and civil penalties. The faster path out is usually a single missed year treated as a correctable violation: deliver the CCR as soon as possible after July 1, certify late to your state with a written explanation, and return to normal cadence the following year. Don't hide it; states are more forgiving of operators who self-report than operators they catch.

Sources

1. 40 CFR Part 141 Subpart O — Consumer Confidence Reports — content requirements at §141.153; annual delivery deadline; biannual distribution and Dec 31 second-delivery deadline at §141.155(j)(2); archive obligations. Accessed 2026-04-18.
2. Federal Register: National Primary Drinking Water Regulations; Consumer Confidence Report Rule Revisions, 89 FR 45980 (May 24, 2024) — docket EPA-HQ-OW-2022-0260; direct-URL e-delivery, language access, per-customer tables, biannual distribution for systems serving 10,000 or more. Accessed 2026-04-18.
3. EPA Consumer Confidence Report program page — CCR program landing; link to iWriter; general small-system guidance. Accessed 2026-04-18.
4. EPA CCR iWriter (hosted at sdwis.epa.gov) — free web-hosted CCR-authoring tool distributed by EPA. Accessed 2026-04-18.
5. EPA SDWIS Federal Reports — source for community-water-system counts and population-served classifications. Accessed 2026-04-18.
6. USDA Rural Development Circuit Rider Program — free technical assistance for rural systems under 10,000 served. Accessed 2026-04-18.
7. Rural Community Assistance Partnership (RCAP) — grant-funded technical and managerial assistance network for rural water systems. Accessed 2026-04-18.
8. EPA Drinking Water State Revolving Fund — low-interest loans and forgivable-principal funding; Bipartisan Infrastructure Law (Public Law 117-58) expanded small-system and disadvantaged-community set-asides. Accessed 2026-04-18.
9. U.S. Census Bureau — American Community Survey — block-group language data for CCR translation-threshold analysis. Accessed 2026-04-18.