EPA's New PFAS Rules: What Water Systems Must Do by 2027

The EPA's final rule establishing Maximum Contaminant Levels (MCLs) for six PFAS compounds — finalized in April 2024 — sets the most significant new drinking water standard in a generation. Public water systems have until 2027 to achieve compliance. The clock is running, and many utilities are still working through what this requires.

What the Rule Covers

The final rule establishes MCLs for PFOA (perfluorooctanoic acid) and PFOS (perfluorooctane sulfonic acid) individually at 4 parts per trillion (ppt) — effectively the lowest level that can be reliably measured with current analytical methods. It also sets a hazard index for four additional PFAS compounds: PFNA, PFHxS, HFPO-DA (GenX chemicals), and PFBS.

The 4 ppt threshold for PFOA and PFOS represents a dramatic tightening from previous health advisory levels. Under the 2022 interim health advisories, the EPA had already set advisory levels at near-zero — 0.004 ppt for PFOA and 0.02 ppt for PFOS — but advisories carry no enforcement weight. The 2024 final rule converts these health concerns into legally enforceable obligations for the first time.

Systems serving more than 10,000 customers face slightly more stringent initial monitoring requirements than small systems, but all community water systems and non-transient non-community water systems are covered. Private wells and bottled water are not covered under the National Primary Drinking Water Regulations.

The Compliance Timeline

The rule establishes a phased compliance timeline. Public water systems had until 2025 to begin initial monitoring. Systems that detect PFAS above the MCL must notify the public and conduct follow-up monitoring. By April 2027, all systems must be in compliance with the MCLs — meaning they must either demonstrate their water meets the standards or have installed treatment capable of achieving compliance.

For systems with elevated PFAS levels, achieving compliance by 2027 requires action now. Engineered treatment solutions — granular activated carbon, reverse osmosis, nanofiltration, and ion exchange systems — all have long procurement and installation timelines. Systems that have not yet begun procurement planning are already at risk of missing the 2027 deadline.

Monitoring Requirements

The monitoring provisions of the rule are detailed and prescriptive. Initial monitoring must cover all applicable PFAS compounds at all entry points to the distribution system. The frequency of follow-up monitoring depends on what the initial results show: systems with no detections may qualify for reduced monitoring frequency, while systems with detections above the MCL must conduct quarterly monitoring until compliance is achieved.

Monitoring must be conducted using EPA Method 533 or EPA Method 537.1, both of which are highly sensitive analytical methods requiring specialized laboratory equipment. Not all state-certified laboratories have these capabilities, and laboratory capacity is a genuine bottleneck in many regions. Utilities should confirm laboratory availability and turnaround time before relying on scheduled sampling to meet their monitoring obligations.

Importantly, the rule requires utilities to retain all monitoring records for at least 10 years. This is a documentation burden that many utilities are not currently meeting, and it has implications for how water quality data management systems are designed and maintained.

Public Notification Requirements

When a public water system detects PFAS above the MCL, it must notify customers within 30 days. The notification must include the health effects of exposure at the measured levels, the fact that the system is not in compliance, and what the system is doing to address the problem. Repeat notifications are required for as long as the system remains out of compliance.

Public notification creates reputational and political pressure that goes beyond the regulatory requirement itself. In a social media environment, 30-day notification windows are effectively immediate — local news coverage of a PFAS detection will precede the formal notification letter in virtually every case. Utilities need communication plans that are ready to activate the moment a detection occurs, not after the regulatory deadline has arrived.

How AI Monitoring Supports Compliance

AI-powered continuous monitoring does not replace the laboratory-based analytical methods required for regulatory compliance — EPA methods 533 and 537.1 require accredited laboratories and cannot currently be replicated by in-line sensors. What continuous monitoring provides is the operational intelligence to manage the compliance process more effectively.

Continuous monitoring of correlated parameters — conductivity, pH, organic carbon indicators, and fluorine-specific sensors — can flag conditions that increase the probability of PFAS detection, allowing utilities to trigger additional laboratory testing before a scheduled monitoring date. This provides earlier warning of compliance risk and more time to respond before formal exceedances are documented.

On the treatment side, AI monitoring supports optimization of granular activated carbon systems — the most commonly deployed PFAS treatment technology. Carbon bed exhaustion is difficult to predict without continuous monitoring of effluent quality. AI models that track breakthrough dynamics can extend carbon service life while ensuring effluent standards are consistently met, reducing both operating costs and the risk of compliance exceedances.

Funding and Financial Assistance

The EPA estimates that PFAS treatment installation will cost water utilities between $1.5 billion and $3.3 billion annually once fully phased in. This is a significant burden, particularly for small systems serving rural communities where per-customer costs are highest. Federal assistance is available through multiple channels.

The Bipartisan Infrastructure Law allocated $9 billion specifically for PFAS and emerging contaminant treatment through the Drinking Water State Revolving Fund, with additional funds available for small and disadvantaged communities. PFAS pollution litigation settlements — particularly the 3M and DuPont settlements totaling over $12 billion — have also generated funding that states are beginning to distribute to utilities.

The 2027 compliance deadline is firm. Utilities that have not begun their compliance planning in earnest are running out of runway. The combination of monitoring requirements, treatment procurement timelines, and public notification obligations means that 2026 is the critical action year for systems with elevated PFAS levels.