What a Cross-Connection Control Program Is

Published Read 9 min read

On this page

A cross-connection control program is the written, governed framework a building operates to keep its plumbing from contaminating the public water supply. It is not a valve or an assembly. It is the administrative system that finds every place where clean and dirty water could mix, assigns the right protection to each one, tracks the testing and paperwork over time, and spells out who is accountable for what. Think of the hardware as the locks and the program as the policy that decides which doors need locks, checks that they still work, and keeps the records to prove it.

If you manage a larger or higher-hazard property, the distinction matters because regulators do not just ask whether you installed a backflow preventer. They ask whether you run a program. This guide explains what that program contains and how the responsibility is divided between your water utility, a designated coordinator, and you. For the device itself and how a reduced-pressure assembly works internally, see our guide on how a backflow preventer (RPZ) works (213). For the annual test as a standalone obligation, see our guide on why annual backflow testing is required (215).

Why a Program, Not Just Devices, Is Required

A single backflow assembly protects one connection on one day. A program protects the whole building over time, and that is the gap regulators care about. The U.S. Environmental Protection Agency’s Cross-Connection Control Manual frames cross-connection control as an ongoing, documented system rather than a one-time installation, because cross-connections are created and re-created constantly. A tenant adds a chemical mixing station. A new boiler goes in. A hose gets left submerged in a mop sink. Hardware alone never catches any of that. A program does, because it builds in repeated surveying, reassessment, and recordkeeping.

There is also a legal driver. Under the Safe Drinking Water Act, the EPA delegates primary enforcement authority to states, and states in turn require public water systems to protect the distribution system from contamination. To meet that obligation, water systems adopt the legal authority to compel customers to identify hazards and install and maintain protection. The American Water Works Association’s M14 manual, the standard reference utilities use, describes a full program rather than a device list. When your water purveyor tells you to run a cross-connection control program, they are passing along a duty that the law placed on them.

The practical takeaway: a building can have a backflow assembly at the meter and still fail a program review, because the review checks the system, not just the part.

The Cross-Connection Survey and Hazard Assessment

The survey is the foundation of the entire program. It is a methodical walk-through of the property to find every actual and potential cross-connection, the point where the public supply could be exposed to a non-potable source. Boilers, chemical feed lines, irrigation, cooling towers, commercial dishwashers, lab and medical fixtures, and janitorial sinks are common findings. The survey produces an inventory: a list of each connection and what is currently protecting it.

Each connection is then classified by hazard. The EPA manual and water-system programs sort hazards by severity, typically separating high-hazard connections (those that could introduce a health risk, such as sewage, chemicals, or pathogens) from lower-hazard ones (those that affect taste, odor, or appearance but not safety). This classification is not paperwork for its own sake. It drives the level of protection each connection needs and how often it gets re-inspected. High-hazard connections rise to the top of the priority list.

This work is performed by certified cross-connection control specialists and, in many jurisdictions, witnessed or directed by the water purveyor. It is not a self-assessment you complete with a clipboard, and the survey result is not final until the qualified specialist and your water authority say it is. The reason is straightforward: misjudging a hazard can leave the public supply exposed, which is exactly the outcome the program exists to prevent.

Assigning Protection and Maintaining the Inventory

Once hazards are classified, each connection is matched to a protection method. Higher-hazard connections call for stronger protection; lower-hazard ones may be protected by a simpler assembly. The two broad strategies a program uses are containment and isolation. Containment places protection at the service entrance, near the meter, so the entire building is sealed off from the public main. Isolation places protection at each internal hazard, so occupants inside the building are protected from that specific point of use. Many properties use both. This guide stays at the program level and does not compare assembly types; for which devices exist and how they differ, see our guide on types of backflow preventers explained (214), and for which connections in a building trigger a requirement, see our guide on where backflow preventers are required in commercial buildings (218).

The inventory is a living document, not a one-time snapshot. Every time use changes, a fixture is added, or a tenant moves in, the program is supposed to re-survey and update the record. A connection that was low-hazard last year can become high-hazard the moment someone connects a chemical line to it. Keeping the inventory current is one of the quiet ways a program either holds up or quietly drifts out of compliance.

Recordkeeping, Test Tracking, and Reporting Duties

Recordkeeping is where many programs pass or fail an audit, because in a regulator’s eyes an undocumented program effectively does not exist. A program tracks, at minimum, the survey results and hazard classifications, the inventory of installed assemblies with their locations, the dates and results of each test, the certification status of the people who tested and repaired them, and any violations found and corrected. When your state or water authority conducts a sanitary survey or program audit, these records are the evidence that your protection is real and current.

Test tracking deserves its own line. Backflow assemblies are tested on a schedule, and the program is responsible for knowing when each one is due, getting it tested by a certified tester, and filing the result. Many water purveyors also require periodic reporting, such as an annual summary of the program’s status. The exact forms, deadlines, and submission rules are set by your state and local water authority, so confirm current requirements with them rather than assuming a universal format. The principle holds everywhere: if it was not recorded, it cannot be shown to have happened.

Who Runs It: Purveyor, Coordinator, and Property Roles

A cross-connection control program is a shared responsibility, and knowing which part you own keeps you out of trouble. Three roles matter.

The water purveyor, your public water system, carries the legal duty under the Safe Drinking Water Act and state rules to protect the distribution system. The purveyor sets the rules customers must follow, approves protection, and enforces compliance, including the authority to require assemblies and, in many programs, to interrupt service for noncompliance.

The cross-connection control coordinator runs the day-to-day program. AWWA’s M14 guidance describes this role as a certified cross-connection control specialist; where a small system does not employ one, it must still designate a responsible person with appropriate knowledge. The coordinator manages surveys, the hazard inventory, test scheduling, and records, and serves as the technical point of contact.

The property owner or facility manager, your role, owns what happens on your side of the meter. You are responsible for allowing surveys, installing and maintaining the protection assigned to your connections, having assemblies tested on schedule by certified testers, keeping your own records, and reporting as required. The building owns its hardware and its hazards; the purveyor owns the public supply; the coordinator connects the two. When a property treats backflow as the purveyor’s problem, that is usually where compliance breaks down.

How a Program Protects the Building and the Public System

The protection runs in two directions, and that is the point most device-focused explanations miss. Containment protection at the service entrance shields the public main and your neighbors from anything that could flow backward out of your building. Isolation protection at internal hazards shields the people inside your building, including staff and tenants, from a contaminant drawn out of one fixture into the rest of your plumbing. A complete program covers both, so a chemical mishap at a single sink does not become a building-wide or city-wide drinking water problem.

A program also protects the operator in a quieter way. Because surveys, classifications, tests, and records are kept current, a failed test or a new hazard is caught and corrected within the program’s cycle instead of surfacing as an emergency or an enforcement action. The system turns a scattered set of devices into something a regulator can audit and a building can actually rely on.

Frequently Asked Questions

Is a cross-connection control program the same as having a backflow preventer?
No. A backflow preventer is a single device protecting a single connection. A program is the documented system that surveys the whole property, assigns protection to every hazard, tracks testing and records, and defines who is responsible. A building can own assemblies and still lack a compliant program.

Who is required to have a cross-connection control program?
Public water systems are required to protect the distribution system, and they pass that duty to customers through local rules. In practice, larger and higher-hazard commercial, industrial, and institutional properties are required to operate a program, but the specific triggers are set by your state and water authority, which determine what applies to your building.

Can I survey my own building and run the program myself?
You can manage records and scheduling, but the survey, hazard assessment, and protection decisions are performed by certified cross-connection control specialists, and assemblies must be tested by certified testers, with the water purveyor approving the outcome. The determination is not final until your water authority signs off.

Why does my water utility, not the city building department, enforce this?
The duty to keep the drinking water distribution system safe sits with the public water system under the Safe Drinking Water Act and state primacy rules. That is why the water purveyor, rather than a general building inspector, sets and enforces cross-connection requirements.

Does the program ever change after the first survey?
Yes, continuously. Each change in use, new fixture, or new tenant can create a hazard, so the program re-surveys, reclassifies, and updates the inventory over time. A program that is never revisited drifts out of compliance even if nothing looks different.

This article is general information, not professional or regulatory advice. Cross-connection control requirements vary by jurisdiction; consult your water purveyor and a certified cross-connection control specialist for decisions about your property.

Sources

  • U.S. Environmental Protection Agency, Cross-Connection Control Manual (EPA 816-R-03-002, February 2003): https://www.epa.gov/sites/default/files/2015-09/documents/epa816r030020.pdf
  • U.S. Environmental Protection Agency, Drinking Water Treatability and Protection: Cross-Connection Control and Backflow Prevention (fact sheet): https://www.epa.gov/system/files/documents/2021-12/ds-toolbox-fact-sheetsccc.pdf
  • U.S. Environmental Protection Agency, Primacy Enforcement Responsibility for Public Water Systems: https://www.epa.gov/dwreginfo/primacy-enforcement-responsibility-public-water-systems
  • American Water Works Association, Manual M14, Backflow Prevention and Cross-Connection Control: Recommended Practices: https://store.awwa.org/M14-Backflow-Prevention-and-Cross-Connection-Control-Recommended-Practices-Fifth-Edition

Related posts:

  1. What a Preventive Plumbing Maintenance Program Covers A preventive plumbing maintenance program is a written schedule that decides which plumbing systems in a building get checked, serviced, and tested, on what interval, and in what priority order,......
  2. How a Garbage Disposal Works Most people picture a garbage disposal as a set of fast spinning blades, like a blender bolted under the sink. That picture is wrong, and the misunderstanding leads to a......
  3. How to Unclog a Kitchen Sink A kitchen-sink clog is almost never the same animal as a bathroom-sink clog, and treating it like one is why so many attempts fail. The blockage in a kitchen line......
  4. How to Unclog a Bathroom Sink Pull the stopper out of a slow bathroom sink and look at what comes up with it. Nine times out of ten it is a gray rope of hair bound......
  5. When to Re-Caulk a Tub or Shower (and Why It Matters) Re-caulk a tub or shower when the bead that seals the joints starts to crack, peel, pull away from the surface, or grow mold that will not scrub off. That......
  6. How a Sump Pump Works Most explanations of a sump pump stop at four words: it pumps water out. That is true, but it skips the part that actually matters when you want to understand......
  7. Signs of a Sewer Line Problem One symptom tells you almost nothing. A pattern tells you a lot. To separate a sewer line problem from an ordinary clog, ask where the trouble shows up and whether......
  8. Why Plumbing Vents Matter (and What Happens When They’re Blocked) That pipe sticking up through your roof is not a chimney and not an overflow. It is the air supply for your drains. Most people never think about it until......
  9. What a P-Trap Is and the Job It Does Look under your bathroom sink and you will see a pipe that dips down into a U and then bends back up before heading into the wall. That bend is......
  10. Septic Tank Maintenance: A Homeowner’s Guide Attention paid before anything goes wrong is what a septic system rewards; attention paid only after is what it punishes. That is the whole difference between maintaining a system and......
  11. How a Storage Tank Water Heater Works A storage tank water heater keeps a large body of water hot all the time so it is ready the instant you open a tap. Cold water enters the bottom......
  12. What You Should Never Flush or Pour Into a Septic System A septic system fails in two ways, and almost everything on this page maps to one of them. Either you bury the tank under material that will not break down,......
  13. What Causes Sewer Line Backups A sewer line backup happens when the single pipe that carries all of your home's wastewater away, the sewer lateral, gets blocked or fails, and waste has nowhere to go......
  14. How to Fix a Dripping Faucet A spout drip is almost always one worn sealing part, and replacing that part is a job most homeowners can finish in under an hour with basic tools. The repair......
  15. How Plumbing Leaks Lead to Mold (and What to Watch For) Mold needs three things to colonize a surface: a mold spore, something organic to feed on, and moisture. Spores already drift through every home in the air and house dust,......

Leave a comment

Your email address will not be published. Required fields are marked *