CCR Compliance for Small Water Utilities (Under 10,000 Served)

By Andy Zhang. Last reviewed 2026-04-19.

Roughly 45,000 of the 49,000 community water systems in the United States serve fewer than 10,000 people. They are the backbone of the country's drinking water infrastructure and, in most cases, the operation is run by a two-to-five-person team juggling source monitoring, distribution maintenance, billing, and regulatory filing on a municipal or cooperative budget. The revised Consumer Confidence Report (CCR) Rule arrives for those systems with the same 2027 compliance date that applies to metropolitan utilities serving millions, but with materially different operational stakes. This guide is written for that audience: the small-system operator, superintendent, board member, or consulting engineer who needs to understand what changed, what stayed the same, and how to build a compliant 2027 CCR without hiring a specialist firm.

The federal Consumer Confidence Report Rule, codified at 40 CFR Part 141 Subpart O and revised in the May 24, 2024 Federal Register (89 FR 45980, docket EPA-HQ-OW-2022-0260), does not treat small systems as a separate regulatory category for most content requirements. A 400-person water district and a 400,000-person city both have to publish a detected-contaminants table per §141.153, explain the health-effects language, and disclose any violations. Where the two diverge is in the mechanics of delivery, translation, frequency (biannual at §141.155(j)(2)), and — critically — in the resources available to comply. The following sections walk through every divergence and how to use it to your advantage.

Who qualifies as a small water system

Within the CCR Rule, "small" is defined by service-population count, not by connection count, revenue, or staffing. For the 2027 rule, the operational dividing line is 10,000: systems serving 10,000 or more move to twice-yearly distribution under §141.155(j)(2) (second delivery due by December 31), and systems below stay on the annual July 1 cadence. The 10,000 threshold is inclusive — a utility reporting exactly 10,000 served is a biannual-distribution system. The service-population figure is the one reported in EPA's Safe Drinking Water Information System (SDWIS) inventory, current as of the start of the compliance year, and it is a year-round-resident count — not a seasonal peak and not a connection-times-household-size estimate unless the primacy agency says so.

Size-bucket matrix: what applies at each population tier

Bucket	Population served	CCR delivery cadence	Translation trigger	Per-customer tables	Typical compliance path
Very small	25–500	Annual (by July 1)	Rare (single-language community)	Rarely triggered (single source)	EPA iWriter + state template; printed mailer
Small	501–3,300	Annual (by July 1)	Primacy-agency threshold per §141.153(h)(3)	Rarely triggered	EPA iWriter / state template; Circuit Rider or RCAP help
Medium	3,301–10,000	Annual (by July 1)	Primacy-agency threshold per §141.153(h)(3)	Possible (multi-source / blending)	EPA iWriter viable; commercial tool often cheaper than staff time
Large	10,001–100,000	Biannual — second delivery by Dec 31 (§141.155(j)(2))	Primacy-agency threshold; §141.155(i) triggers at 100,000+	Expected (multi-zone)	Commercial CCR platform + primacy-agency coordination
Very large	100,001+	Biannual — second delivery by Dec 31 (§141.155(j)(2))	§141.155(i) multi-language notice obligation	Expected (multiple pressure zones / source blends)	Enterprise CCR + GIS + customer-notification stack

This guide addresses the top three rows — community water systems with 10,000 or fewer people served, on the annual cadence.

"Community water system" itself is a statutory term under the Safe Drinking Water Act: a public water system that serves at least 15 service connections used by year-round residents or regularly serves at least 25 year-round residents. For consumer-facing language see what is a CCR. That definition captures municipal utilities, water districts, mobile-home parks with their own wells, year-round co-ops, and similar. It excludes non-transient non-community systems (a school or workplace with its own well) and transient non-community systems (a campground, rest stop, or seasonal church), neither of which has a CCR obligation at all. If you operate one of the latter two categories, the 2027 CCR Rule does not apply to you. If you operate a community water system with 10,000 or fewer people served, keep reading.

Three boundary cases recur. First, a co-op or district whose SDWIS population figure is stale — the number on file reflects the 1990 census or a pre-annexation count and no longer matches reality. Update the SDWIS inventory before making compliance decisions that turn on the threshold. Second, a wholesaler selling to retail utilities: the wholesaler's own service population is what controls its direct CCR obligation, not the downstream aggregate. Third, a consecutive system that buys finished water from a regional wholesaler: the consecutive system's own service population controls, regardless of the wholesaler's size.

2027 changes most relevant to small systems

Four elements of the revised rule are most operationally relevant for systems serving 10,000 or fewer.

Direct-URL electronic delivery is available to you. Under the revised CCR electronic delivery framework, any community water system — regardless of size — may satisfy the delivery obligation by mailing customers a short notice containing a direct URL that lands on the CCR document itself. For a small utility, this is the single biggest cost-reduction opportunity in the 2024 rulemaking. A utility that previously mailed a multi-page booklet to 1,200 households can, in 2027, mail a one-sheet notice and host the CCR as a PDF on the primacy agency's free publication portal or on a low-cost static website. Direct-URL delivery is not mandatory; paper distribution remains compliant. But the cost differential is stark — roughly 1.10 to 1.80 dollars per household for full booklet mailing versus 0.30 to 0.55 dollars for a notice-only mailing. On a 1,500-customer system, that is a 1,200-to-1,800-dollar annual line item saved.

Translation thresholds are primacy-agency-determined. Under §141.153(h)(3) the revised rule does not set a single federal percentage trigger. Each primacy agency defines what counts as a "large proportion" of non-English speakers in the service area and whether the utility must provide a translated CCR, a language-specific contact insert, or both. In practice state thresholds cluster around 10 percent of the service area or a minimum-number floor of a few hundred speakers, but the exact number you must meet is set by your state — not the federal rule. The separate multi-language notice requirement at §141.155(i) only applies to community water systems serving 100,000 or more, so small systems are not subject to it. See our CCR translation and accessibility guide for the state-by-state mechanics and for free translation resources available through state health departments and the Rural Community Assistance Partnership.

Per-customer detected-contaminants tables remain required, and a new plain-language summary is added. The 2024 rule did not eliminate the §141.153 detected-contaminants table for small systems. What it did do is create a new §141.156 "plain-language summary" section — a concise, readability-targeted narrative that accompanies the data table and explains in consumer-friendly terms what was detected and what it means. Most primacy agencies are implementing the readability target at Grade 8 or below. For a small system without in-house communications staff, this is a drafting task, not an analytical one — you are taking the same monitoring data you already report to your primacy agency and presenting it in a template with plain-language headers. EPA's free CCR iWriter tool (hosted at sdwis.epa.gov) handles the bulk of this translation automatically; EPA's how water systems comply with CCR requirements page is the definitive guidance landing.

Annual delivery remains the default; biannual does not apply to most small systems. The twice-yearly distribution requirement at §141.155(j)(2) applies to community water systems serving 10,000 or more people (the threshold is inclusive — exactly 10,000 served puts you on biannual). The second of the two deliveries must be completed by December 31 of the reporting year. If your SDWIS service-population figure is below 10,000, you remain on the traditional annual schedule — one CCR per calendar year, due to customers by July 1, covering the prior calendar year. A handful of state primacy agencies may adopt more stringent biannual requirements that reach below the federal threshold, but that is the exception, not the rule. Check the adopted text in your state before assuming either way; the CCR 2027 deadline calendar tracks state-by-state primacy adoption.

What stays the same

Most of the CCR Rule did not change in 2024, and the continuity is the single biggest help to small systems. The basic content elements — information on the water source, the detected-contaminants table, the health-effects language for any violations, the definitions of regulatory terms like MCL and MCLG, the utility contact information, and the date of delivery — are substantially the same as under the 1998 rule. If your system already produces a compliant CCR today, roughly 80 to 85 percent of your content will carry forward into the 2027 cycle with template updates but no new analytical work.

The monitoring data feeding the CCR is the same data you already report to your primacy agency under the Safe Drinking Water Act monitoring schedules. Nothing in the 2024 rulemaking expanded the monitoring schedule itself; the rule addresses how monitoring results are communicated to customers, not how they are collected. If you are on a standard reduced-monitoring schedule for groundwater systems, that schedule is unchanged.

The delivery deadline — July 1, covering the prior calendar year — is unchanged for annual distribution. The primacy-agency certification-of-delivery obligation under §141.155(c) (a signed attestation that the CCR was delivered to customers, filed with the primacy agency within 10 days of CCR distribution) is unchanged in structure, though some primacy agencies are updating the submission portal.

The record-retention obligation is unchanged: CCRs and documentation of delivery must be retained for at least three years under §141.155(h), though many primacy agencies require longer retention. Confirm the retention period in your state's adopted rule.

Minimum-viable compliance path

For a small system with limited staff time, the minimum-viable 2027 compliance path looks like this:

Step one. Confirm your SDWIS service-population figure is current. If it is not, update it before March 2027. Population is the number that decides whether biannual distribution, language-access thresholds, and certain primacy-agency submission categories apply to you.

Step two. Pull your 2026 monitoring results from your primacy agency's reporting portal. These are the data points that feed the 2027 CCR. If there were no violations and no new detections beyond prior-year trends, the CCR preparation is a template-update exercise.

Step three. Open EPA's free iWriter tool (linked in the resources section below) and step through the guided template. iWriter produces a draft CCR in the format the revised rule contemplates, with the health-effects language, definitions, and plain-language explanatory text pre-populated. You edit the utility-specific fields and the detected-contaminants values.

Step four. Decide on a delivery mechanism. If your customer base is predominantly residential and you have email addresses on file for at least 60 percent of accounts, evaluate direct-URL delivery with email notification for the opted-in accounts and paper notice for the rest. If you have fewer email addresses, paper notice with a direct URL is the cost-optimal path. If you are not yet ready to host the CCR on a web-accessible URL, paper distribution of the full CCR remains compliant.

Step five. Host the CCR. If you do not have a website capable of serving a persistent URL, your primacy agency likely offers a free hosted-CCR service on the state drinking-water program's website. Several states (including Pennsylvania, Oregon, and New Mexico) have maintained such portals for over a decade; more are standing them up specifically to support 2027 compliance. Using the state portal satisfies the persistence and accessibility requirements of direct-URL delivery without requiring you to run your own web infrastructure.

Step six. Distribute by July 1, 2027. File the primacy-agency certification-of-delivery form by the state-specified deadline (typically October 1, 2027).

Step seven. Archive. Retain the delivered CCR, the delivery documentation, and any customer-request-for-paper-copy responses for at least three years, or longer if your state requires.

For a more detailed cycle walkthrough, see our CCR 2027 checklist and the how to write a CCR drafting guide.

Resources for small utilities

Small systems should not pay for what is available free. Four resources cover most of the compliance burden without commercial tooling.

EPA iWriter. EPA's free CCR iWriter — hosted at sdwis.epa.gov/ccriwriter and requiring a login account — is a guided web tool that produces a draft CCR from utility-entered monitoring data. It handles the health-effects language, the definitions, and the readability-level targets automatically. It is maintained by EPA's Office of Ground Water and Drinking Water and updated to reflect the revised rule. iWriter is usable by any community water system regardless of size; it is designed primarily for small systems that do not have in-house communications staff. EPA's CCR compliance help page is the definitive guidance landing.

State primacy agency technical assistance. Every primacy agency (the state drinking-water program) maintains a small-systems technical-assistance function, often funded partially through EPA grant money. These staff will walk you through a draft CCR, flag non-compliance risks before you submit, and in many cases provide free hosting for the CCR document itself. The contact is typically listed on the state drinking-water program's website under "small systems" or "compliance assistance."

USDA Rural Development Circuit Rider Program. The USDA's Circuit Rider program funds experienced water-system operators to travel to rural utilities and provide hands-on technical assistance, including CCR preparation. The service is free to utilities that qualify (generally, utilities in communities under 10,000 population). Applications are handled through the state rural water association.

Rural Community Assistance Partnership (RCAP). RCAP is a national network of regional nonprofits providing technical and financial assistance to small rural utilities. RCAP regional offices run CCR-preparation workshops annually and provide one-on-one assistance on request, generally at no cost. RCAP is distinct from the state rural water associations but often partners with them.

Drinking Water State Revolving Fund (DWSRF). DWSRF is a federal-state financing program for water-infrastructure projects, including eligible compliance projects. CCR preparation is generally not itself DWSRF-eligible, but related compliance infrastructure — monitoring-data management systems, customer-communication upgrades, web-hosting capability — frequently is. If compliance-driven capital costs are pushing your budget, ask your primacy agency about DWSRF principal forgiveness and set-aside funding for small systems.

Budgeting for 2027 CCR compliance

For a small system running annual (not biannual) distribution, budget for the 2027 CCR should cover four categories: production, translation (if applicable), delivery, and archive-and-submission.

Production. If you use EPA iWriter and do your own data-entry, direct production cost is zero. If you contract a consulting engineer or a communications firm to draft the CCR for you, typical 2026 pricing ranges from 800 to 2,500 dollars for a small system, depending on the complexity of the contaminants table and whether translation is included.

Translation. If your system triggers the language-access threshold for one non-English language, budget 400 to 900 dollars for a certified translation of the CCR. Many state drinking-water programs maintain a pre-approved translator list with negotiated rates. RCAP and state rural water associations often subsidize translation for small systems that qualify.

Delivery. For paper distribution of the full CCR, budget 1.10 to 1.80 dollars per household served. For direct-URL delivery with a one-sheet notice and email-plus-paper-on-request, budget 0.30 to 0.55 dollars per household served plus roughly 200 to 400 dollars in one-time setup for URL hosting and email list management. For a 1,500-customer system, the delta between the two mechanisms is roughly 1,200 to 1,900 dollars per cycle.

Archive and submission. The state-specified certification-of-delivery submission typically has no associated fee. Archive storage (digital PDFs and delivery documentation) has a nominal cost. Budget 50 to 150 dollars for archive-and-submission tooling if you do not already have a document-management system in place. The CCR software guide covers cycle-management tooling if you want to compare options beyond iWriter.

Total annual CCR-compliance budget for a well-run small system using free federal tools and direct-URL delivery: roughly 600 to 1,500 dollars on a 1,500-customer base, most of which is delivery postage. Compare to 2,000 to 4,500 dollars for the same system using contracted production and paper-booklet distribution.

When a commercial tool is worth it

EPA iWriter handles most small-system compliance cases. Commercial CCR software — offered by vendors such as WaterOps, HDR, and several regional firms — is worth the spend in three specific situations.

Multiple source-water systems with complex blending. If your system has more than two sources with different monitoring schedules and blending ratios that vary by season, the detected-contaminants table is non-trivial to produce correctly. Commercial software that connects to your primacy-agency reporting feed and computes per-source values automatically reduces error risk materially.

Biannual distribution obligation mid-growth. If you are a system sitting near 9,000 population served and growth projections put you over 10,000 within two or three compliance cycles, it is often worth standing up commercial software now rather than repeatedly re-tooling. Biannual distribution software pays off at the margin for systems just over the threshold.

State-specific submission formats beyond the federal floor. A handful of state primacy agencies (New Jersey, California, Oregon) have adopted primacy-agency-specific submission formats and validation rules that layer on top of the federal rule. Commercial software that tracks those state-specific formats and validates in real time saves hours of back-and-forth with primacy agency staff per cycle. See our New Jersey CCR rule guide for an example of state-specific layering.

If none of these three apply to your system, stay on iWriter plus state primacy portal hosting. The commercial tool pays off only when the operational complexity justifies it.

Common small-system compliance mistakes

Five mistakes show up consistently in small-system CCR compliance reviews.

Using a stale SDWIS population figure. A population figure that is five years out of date can misstate your threshold position, your language-access obligation, or your biannual-distribution obligation. Update the SDWIS record before March of the compliance year.

Treating direct-URL delivery as optional only for big systems. It is optional for every size class, but the cost differential for small systems is often decisive. Do not skip the direct-URL cost-benefit analysis because you assume the mechanism is for metropolitan utilities.

Missing the primacy-agency certification-of-delivery deadline. Delivery by July 1 is the customer-facing deadline; certification of delivery filed with the primacy agency is typically due by October 1 or later. Missing the certification deadline is a reportable violation even if the delivery itself was timely. See our CCR enforcement and penalties guide for the consequences.

Forgetting the paper-copy-on-request obligation. A utility that moves to direct-URL delivery must still provide a paper copy within a specified turnaround (EPA's model language suggests 14 days) to any customer who requests one. Build the paper-on-request workflow into your customer-service protocol before 2027, not after the first request arrives.

Using free tools without reading the primacy-agency overlay. EPA iWriter produces a federal-floor-compliant draft. If your primacy agency has layered additional content requirements on top, iWriter will not catch them. Review the adopted state rule alongside the iWriter output. Small-systems TA staff at the primacy agency will do this review for you on request.

FAQ

Does the 2027 CCR Rule apply to my small system if I serve fewer than 500 people?

Yes, if you are a community water system as defined by the Safe Drinking Water Act — meaning you serve at least 15 year-round service connections or 25 year-round residents. The CCR Rule has no population floor for community water systems. If you are a non-community system (a school or campground with its own well), the CCR Rule does not apply to you regardless of size.

Do I have to distribute the CCR twice a year?

No, not unless your primacy agency has adopted a more stringent requirement that reaches below the federal threshold. The federal biannual distribution requirement under §141.155(j)(2) applies to community water systems serving 10,000 or more people — the threshold is inclusive, so a system reporting exactly 10,000 served is biannual, and the second of the two deliveries must be completed by December 31. If your SDWIS population figure is below 10,000, you remain on annual distribution — one CCR per year, delivered by July 1. Confirm with your state primacy agency that no state-specific expansion applies.

Can I use email delivery only?

Only to customers who have consented to electronic delivery. Under the revised rule, email is a permitted delivery mechanism but consent must be documented and you must retain a mechanism for customers who have not consented (paper notice with direct URL, or full paper CCR). A utility that moves entirely to email without documented consent from every household is out of compliance regardless of whether customers actually read the emails.

What do I do if I do not have a website to host the CCR?

Use your primacy agency's hosted-CCR portal. Most state drinking-water programs offer free hosting of small-system CCRs on the program's website, specifically to support direct-URL delivery by utilities without their own web infrastructure. Contact your primacy agency's small-systems technical-assistance coordinator. If your state does not offer hosted CCR space, paper distribution of the full CCR remains fully compliant and is the right choice.

Where do I get help if I am overwhelmed?

Three free channels. First, your state primacy agency's small-systems technical-assistance staff — the fastest and best-informed source for state-specific questions. Second, the USDA Circuit Rider program through your state rural water association, which provides hands-on in-person help. Third, RCAP's regional office, which runs CCR workshops and provides one-on-one support. All three are free to qualifying small utilities. Commercial CCR consultants are a backup, not a first stop. For broader utility-communications questions beyond CCR, see the utilities section.

Sources

1. 40 CFR Part 141 Subpart O — Consumer Confidence Reports — content requirements at §141.153; delivery certification (10 days) at §141.155(c); retention (3 years) at §141.155(h); biannual distribution with December 31 second delivery at §141.155(j)(2); multi-language notice for systems ≥100,000 at §141.155(i); new plain-language summary section at §141.156. Accessed 2026-04-19.
2. Federal Register — National Primary Drinking Water Regulations; Consumer Confidence Report Rule Revisions, 89 FR 45980 (May 24, 2024) — docket EPA-HQ-OW-2022-0260. Accessed 2026-04-19.
3. EPA Consumer Confidence Report Rule landing page — program hub, links to iWriter and state implementation guidance. Accessed 2026-04-19.
4. EPA CCR iWriter (sdwis.epa.gov/ccriwriter) — free, login-gated CCR-authoring tool. Accessed 2026-04-19.
5. EPA — How Water Systems Comply with CCR Requirements — definitive CCR compliance-help guidance landing. Accessed 2026-04-19.
6. USDA Rural Development — Circuit Rider Program — free on-site technical assistance for rural systems under 10,000 served. Accessed 2026-04-19.
7. Rural Community Assistance Partnership (RCAP) — national network of regional nonprofits providing technical, managerial, and financial assistance to small rural utilities. Accessed 2026-04-19.
8. EPA Drinking Water State Revolving Fund (DWSRF) — low-interest loans and, in some cases, forgivable principal for eligible compliance infrastructure; small-system and disadvantaged-community set-asides expanded under the 2021 Bipartisan Infrastructure Law (Public Law 117-58). Accessed 2026-04-19.
9. America's Water Infrastructure Act of 2018 (Public Law 115-270), Section 2008 — statutory basis for CCR revisions.