Cross Connection Control Program

Cross-Connection Control Programs: How Water Utilities Protect the Public Supply

When a property owner receives a notice requiring backflow testing, that notice comes from a cross-connection control program. Understanding what these programs are, how they work, and what authority they carry explains why compliance isn't optional — and why ignoring notices always gets more expensive over time.

Behind every backflow testing notice that arrives in a property owner’s mailbox is a cross-connection control program — a structured administrative and regulatory system operated by a water utility to identify and manage the risks posed by cross-connections throughout its service area. For most property owners, this program is invisible until a notice arrives. For the water utilities that operate them, it is a constant, ongoing effort that involves surveying thousands of properties, maintaining compliance databases for tens of thousands of devices, coordinating with hundreds of certified testers, and following up on non-compliance through a structured escalation process.

Understanding how cross-connection control programs work — what their legal authority is, what they are required to do, how they find out about cross-connections on your property, how they track compliance, and what they can and cannot do when compliance is not achieved — provides the context that makes backflow testing requirements make sense. It also answers the question that many property owners have when they receive a testing notice: why is the water utility involved in my plumbing at all?

This article explains the structure and function of cross-connection control programs from the ground up — what they are required to contain under most state frameworks, how the survey process works, how database and notification systems operate, where third-party administrators fit in, what enforcement authority utilities actually have, and what the limits of that authority are. It is the article that completes the picture of the backflow testing compliance ecosystem that the other nine articles in this series describe from the property owner’s perspective.

What a Cross-Connection Control Program Is — and Why Utilities Run Them

A cross-connection control (CCC) program is a formal, documented plan adopted by a water utility for the systematic management of cross-connection risks within its distribution system. Most state drinking water programs require utilities above a minimum size threshold — typically those serving 25 or more customers — to maintain an active CCC program as a condition of their operating authority under the state’s primacy agreement with the EPA.

The fundamental reason utilities run these programs is public health protection. Backflow contamination events are real, documented, and have caused illness and death in the United States. The utility is legally responsible for delivering safe water to the service connection. Any contamination that flows backward through an unprotected cross-connection from a customer’s property into the distribution system can affect not just that property but every property connected to the same distribution lines. A single unprotected high-hazard connection at a hospital or chemical facility represents a potential contamination risk for an entire neighborhood.

The cross-connection control program is the mechanism through which the utility exercises its legal authority to require customers to protect those connections. Without a formal program — with written policies, documented authority, trained staff, and records — the utility cannot effectively enforce backflow prevention requirements even when state law authorizes them to do so.

The Eight Elements of an Effective CCC Program

While programs vary in scale, sophistication, and resource investment, the EPA’s Cross-Connection Control Manual and most state program frameworks identify eight core elements that a comprehensive CCC program should include. The table below describes each element and explains why it matters.

Program Element	What It Involves	Why It Matters
Legal Authority	Ordinance, service agreement language, or regulatory authority establishing the right to require backflow protection and enforce compliance	Without legal authority, the utility cannot require installation, mandate testing, or shut off service for non-compliance
Cross-Connection Survey Program	Systematic on-site inspections of properties to identify actual and potential cross-connections and evaluate existing protection	Identifies unprotected connections before a contamination event; triggers installation requirements for properties not yet in the program
Assembly Specification	Written policy defining which backflow prevention assemblies are approved for each hazard level, with reference to approved assembly lists (USC, ASSE)	Ensures devices installed in the system provide the right level of protection; prevents use of non-approved assemblies that may not perform to standard
Tester Certification & Approval	Process for verifying that testers operating in the service area hold the required credentials and approved calibrated equipment	Ensures test reports reflect actual device performance; prevents fraudulent or incompetent testing that creates false compliance records
Records Management / Database	Tracking system for every registered device in the service area, including installation date, test history, repair history, and compliance status	Enables proactive notification, tracks the compliance cycle, supports enforcement, and provides data for annual state reporting
Notification System	Annual test due notices, reminder notices, non-compliance notices, escalating enforcement notices	Keeps property owners informed and creates the documented escalation trail needed for enforcement actions
Enforcement	Escalating penalty structure culminating in service termination authority	Creates the compliance incentive; without enforcement teeth, voluntary compliance rates are much lower
Public Education	Customer communications, website resources, FAQs, contractor outreach	Reduces compliance failures caused by lack of awareness rather than unwillingness; reduces administrative burden of enforcement

Not every utility has all eight elements equally developed. Small rural water districts with limited staff and resources often have strong legal authority and basic notification systems but limited survey capacity. Large urban utilities typically have all eight elements in place and actively funded. The quality of a program’s surveys and its database management capability are often the most visible indicators of a mature versus a developing program.

The Survey Process: How Utilities Find Cross-Connections

The cross-connection survey is the proactive mechanism through which utilities identify where backflow protection is needed — before a contamination event reveals it. A survey is a systematic examination of a property’s plumbing system, starting at the water meter and tracing all connections to their endpoints, to identify actual and potential cross-connections and to assess whether existing protection is appropriate for the hazard level of each connection.

Commercial and Industrial Surveys

For commercial and industrial properties, a full cross-connection survey involves a walk-through of the building’s water system with a trained inspector, accompanied by a building representative who can identify the purpose of each water connection. The inspector traces all water piping from the meter, identifies every point where the potable supply connects to equipment, systems, or processes that could introduce contaminants, classifies each identified cross-connection by hazard level, and assesses whether the existing backflow prevention — if any — is appropriate for that hazard.

The result of the survey is a written report identifying all unprotected or inadequately protected cross-connections, with recommendations for corrective action — installation of a backflow preventer, upgrade of an existing device, or elimination of the cross-connection. The property owner typically has a specified window — often 60 to 90 days — to complete the required corrective action before enforcement begins.

Survey frequency for commercial properties varies by hazard level. High-hazard facilities like hospitals, industrial processors, and chemical operations are typically surveyed every two to three years. Standard commercial properties may be surveyed every three to five years. The Madison, Wisconsin Water Utility, for example, surveys high-hazard commercial and industrial facilities on a two-to-three-year cycle and uses its water meter replacement program as a coordination point for residential surveys.

Residential Surveys

Residential cross-connection surveys are more limited in scope than commercial surveys, for practical reasons. Most state programs that require residential surveys limit the inspection to the area near the water meter — typically a basement or utility room — rather than requiring an inspection of the entire property to the last free-flowing tap. This approach is less intrusive, faster to complete, and sufficient to identify the most common residential cross-connection risks: in-ground irrigation systems, private wells connected to the municipal supply, boiler connections, and pool fill lines.

Many utilities coordinate residential surveys with their water meter replacement cycles. When a meter is replaced, an inspector is already on-site at the property and can complete a limited cross-connection check during the same visit. This coordination is efficient for the utility and minimizes the disruption to homeowners, who would otherwise need to be home for a dedicated inspection appointment.

Wisconsin’s Chapter NR 810.15 regulations, which require residential surveys in addition to commercial ones, have prompted utilities in that state to develop systematic residential survey programs that many utilities in other states do not have. California’s 2024 Cross-Connection Control Policy Handbook similarly requires comprehensive hazard assessments that extend to residential connections — an expansion that requires significant survey capacity from California utilities.

Self-Survey Programs

Some utilities, particularly those with large service areas and limited inspection staff, supplement their professional survey programs with customer self-survey programs. Under these programs, property owners complete a standardized questionnaire about the plumbing connections on their property — identifying irrigation systems, auxiliary water sources, boilers, pools, and other common cross-connection points. The utility reviews the responses and determines whether a professional survey is warranted or whether existing protection appears adequate.

WSSC Water (Maryland) has used a self-survey program as part of a broader effort to catch up on compliance across a service area with years of incomplete cross-connection tracking. Rock Island, Illinois printed self-survey notices on utility bill envelopes throughout 2024. Self-survey programs are not as reliable as professional surveys — property owners may not recognize all cross-connections — but they are a pragmatic tool for utilities with resource constraints.

What Triggers a New Survey

Several specific events typically trigger a cross-connection survey beyond the regular scheduled cycle: new construction or substantial renovation of a commercial property; a change in business type at a commercial location; a complaint or report of a potential cross-connection hazard; and any documented backflow incident at or near a property. New construction is universally surveyed — a certificate of occupancy or building permit closure in most jurisdictions requires backflow compliance sign-off.

Database Management: The Compliance Engine

The most operationally significant element of a mature cross-connection control program is its records management system — the database that tracks every backflow prevention assembly in the service area, its installation and testing history, and its current compliance status. Without a functioning database, the utility cannot efficiently send notifications, track who has and has not complied, manage enforcement escalation, or report to the state on program performance.

What the Database Contains

A comprehensive CCC database maintains a record for each registered device that includes: the property address and account information; the device type, manufacturer, model, size, and serial number; the installation date; the current hazard assessment result; the test history with dates, results, and tester certification numbers for each test; any repair or replacement actions; and the compliance status relative to the current annual deadline.

California’s CCCPH specifically requires that water system databases maintain the two most recent hazard assessments conducted at each premise, details on each backflow prevention assembly including manufacturer, model, size, installation date, and serial number, and records of all replacements, relocations, and repairs. This level of documentation detail goes beyond what many programs have historically maintained and reflects the direction that program record-keeping requirements are moving.

How Notifications Work

The database drives the notification cycle. Approximately 30 to 60 days before each device’s test due date, the system generates an annual test due notice that is mailed to the property owner on record. If no passing test report is received by the deadline, the system generates a non-compliance notice. Further inaction triggers escalating enforcement notices according to the program’s defined escalation timeline.

The notification address in the database is the property owner of record at the time the device was registered. When properties are sold, the database is not always updated promptly — a common source of compliance failures is a new property owner who is not receiving notices because the database still has the previous owner’s address. Property owners who purchase properties with existing backflow assemblies should confirm their contact information with the water utility’s cross-connection control program directly.

Third-Party Program Administrators: BSI and Others

A significant and growing share of water utilities across the United States contract with third-party program administrators to manage some or all of their cross-connection control program functions. The most prominent of these administrators is Backflow Solutions Inc. (BSI), which provides database management, notification, tester registration, and online test report submission services for hundreds of utilities nationwide. Other program administrators include Safe Water Commission (primarily serving utilities in Minnesota and the upper Midwest), Vepo LLC (serving Texas utilities), and HydroCorp (which also provides survey services in addition to program administration).

When a utility contracts with a third-party administrator, the administrative functions of the CCC program — maintaining the device database, generating and mailing compliance notices, providing the online portal through which certified testers submit test reports, verifying tester credentials and gauge calibration — are handled by the administrator rather than by utility staff. The utility retains full legal authority and oversight responsibility; the administrator handles the operational logistics.

From a property owner’s perspective, the practical consequence is that compliance notices may come from a third-party administrator rather than directly from the water utility. A notice from BSI Online or Safe Water Commission is an official compliance notice, not a marketing solicitation — it carries the same authority as a notice directly from the utility, because the administrator is acting as the utility’s authorized agent. The consequences of ignoring a notice from a program administrator are identical to the consequences of ignoring a notice from the utility itself.

If You Receive a Notice from an Unfamiliar Organization

Many property owners receive backflow compliance notices from BSI Online, Safe Water Commission, or similar administrators and are unsure whether the notice is legitimate. To verify: check whether the notice references your specific water utility by name, includes your property address and device information, and provides a phone number for your utility’s cross-connection control program. You can also contact your utility’s customer service line directly and ask whether they use a third-party administrator for their cross-connection control program. Do not ignore a notice while you are verifying its legitimacy — contact the administrator and the utility simultaneously.

Tester Approval: How Programs Verify Who Can Submit Reports

A utility’s approved tester list is one of the most operationally important components of its cross-connection control program. The list defines whose test reports the utility will accept. A test performed by a certified tester who is not on the utility’s approved list will be rejected, regardless of the quality of the test or the certification credentials of the tester.

To be added to a utility’s approved tester list, a certified tester typically must: submit a copy of their current certification from a recognized certifying body (ASSE, USC FCCC&HR, or state equivalent); provide documentation of their test gauge’s annual calibration; complete the utility’s tester registration application and pay any required fees; and in some cases attend a utility-specific tester orientation or annual meeting.

Approved tester lists are reviewed annually in most programs. Testers whose certification lapses, whose gauge calibration expires, or who fail to meet ongoing requirements are removed from the list. Some utilities post their approved tester lists publicly on their websites; others provide them on request. The California Water Service, for example, requires testers to attend annual tester meetings to remain on the approved list — a requirement that ensures testers are current on any program changes before each testing season.

For property owners, the approved tester list serves as a quality filter: every tester on the list has been vetted by the utility and meets the specific requirements of the program. Testers on the list know the utility’s report submission format, understand the deadline structure, and are authorized to submit on behalf of property owners they serve. This is why using a tester who is already on your utility’s approved list is preferable to using a certified tester who is not — the approved tester can complete the full compliance cycle, while the non-approved tester may produce valid test results that are nonetheless rejected by the utility.

Enforcement: What Utilities Can and Cannot Do

Water utility enforcement authority in cross-connection control comes from three overlapping sources: state drinking water regulations that authorize utilities to require backflow protection as a condition of safe water delivery; the service agreement between the utility and each customer, which incorporates compliance with the cross-connection control program as a condition of continued service; and in some cases local ordinances adopted by the municipality that owns or governs the utility.

What Utilities Can Do

Within their authority, utilities can require customers to install approved backflow prevention assemblies on cross-connections identified during surveys. They can require annual testing by approved certified testers. They can reject test reports from non-approved testers. They can assess fees for administration of the cross-connection control program. They can issue civil penalties for non-compliance, within the amounts established by ordinance or state regulation. And they can terminate water service to properties that remain non-compliant after exhausting the escalation process.

Service termination is the most consequential enforcement tool and is used as a last resort after other mechanisms have failed. For residential properties it means no water to the home; for commercial properties it means forced operational closure. The threat of service termination is sufficient to produce compliance in most cases — the cases where it is actually executed are typically those involving persistent non-responsiveness rather than inability to comply.

What Utilities Cannot Do

Utility enforcement authority has meaningful limits. In most jurisdictions, a utility cannot enter a property to conduct an inspection without the owner’s consent or a court order — the homeowner or business owner has the right to refuse entry, though doing so typically triggers escalated compliance requirements. A utility cannot specify that only utility-affiliated contractors perform backflow testing or installation — property owners have the right to choose any certified tester on the utility’s approved list. And a utility cannot retroactively require a more protective assembly type for a device that was compliant under the rules in effect when it was installed, unless the device requires replacement or the hazard classification of the connection has changed.

Utilities also cannot hold property owners responsible for test results submitted by testers who failed to properly submit reports. If a certified tester performed a passing test but failed to submit the report to the utility by the deadline, the compliance failure that results is primarily the tester’s error — but the enforcement notice still comes to the property owner, because the utility’s records show no passing report on file. This is a practical risk that property owners should manage by always confirming with their tester that submission has been completed, not just that the test was passed.

What Triggers a New Device Requirement for Existing Properties

A common question from property owners who have owned a property for years without a backflow requirement is: how does a utility suddenly decide they need a device? Several specific triggers produce new installation requirements for properties that have not previously been in the cross-connection control program.

A cross-connection survey identifies an unprotected connection. This is the most common mechanism. A utility inspector visits the property as part of a scheduled survey cycle, identifies an irrigation system or other cross-connection without an approved backflow preventer, and issues an installation requirement. The property may have had this cross-connection for years without the utility being aware of it.
A change in business operations. A new tenant or business operation creates hazards that did not exist under the previous occupant. A restaurant opening in a previously retail space, for example, creates backflow hazard requirements that a clothing store did not. New commercial water accounts are typically assessed during utility setup.
New construction or major renovation. Building permits trigger a cross-connection control review. A new irrigation system installation requires a backflow preventer installation permit. A major renovation that adds or modifies plumbing connections triggers a survey of the modified systems.
A neighbor complaint or reported incident. If a backflow incident is reported or suspected, the utility may survey the immediate area for unprotected cross-connections that could have contributed.
State regulatory expansion. If a state expands its cross-connection control requirements — as California did with its 2024 CCCPH update — utilities are required to expand their survey programs to identify previously unregistered connections in the newly covered categories.

How to Navigate a Dispute with Your Utility's Program

Most property owners who receive compliance notices and act on them promptly never need to interact with the cross-connection control program beyond scheduling a test and ensuring results are filed. But disputes do arise — database errors place properties in non-compliance that have actually tested, incorrectly classified devices generate upgrade requirements, or new installation requirements are issued for connections that property owners believe do not require protection.

The most common dispute is a database error. The utility’s records show no passing test report for a device that was actually tested and submitted by a certified tester. This happens when a tester submits a report to the wrong account number, uses an outdated form, or submits through a portal without receiving confirmation of successful receipt. The resolution process is typically straightforward: contact the program administrator or utility’s cross-connection control office with the test report in hand, and the database can be corrected once the report is verified. This is why retaining copies of all test reports is not optional — it is the evidence needed to resolve exactly this type of situation.

Disputes about installation requirements — whether a specific connection actually requires a backflow preventer, or whether the device type specified is appropriate — are more complex. Property owners who believe an installation requirement is incorrect or disproportionate should request a formal written explanation from the utility’s cross-connection control program, review the state plumbing code and local ordinance provisions cited, and if necessary engage a licensed plumber or cross-connection control specialist to provide an independent assessment. Utilities are required to make decisions based on the hazard classification framework in their program — if the requirement reflects a legitimate application of that framework, it will stand. If it reflects a misapplication, it can be corrected through the utility’s administrative process.

The Program From the Property Owner's Side: What You Are Actually Dealing With

From the property owner’s perspective, the cross-connection control program is the administrative machine that generates your compliance obligations. Understanding it as a system — rather than as a series of disconnected notices from various organizations — makes it much easier to navigate.

The program is the reason you receive testing notices, and it is the reason those notices come from BSI or Safe Water Commission rather than from your water department directly. It is the reason your water can be shut off for missing a test deadline — because service termination authority is a core element of the program’s enforcement framework, not an unusual or exceptional action. It is the reason only certified testers on the utility’s approved list can produce valid test reports — because the tester approval process is how the program ensures test results are reliable.

And it is the reason that staying current with annual backflow testing is not just a compliance obligation but an active contribution to protecting the water supply for your entire community. The cross-connection at your property — the irrigation system, the boiler connection, the commercial kitchen plumbing — is one of thousands in your utility’s service area. The cross-connection control program exists because the aggregate risk from all of those connections, unmanaged and unmonitored, would be unacceptable. Annual testing is your role in a system designed to protect an essential public resource.

Find Your State's Program

The state-by-state requirements directory at getyourbackflowtested.com provides current information on backflow testing requirements for all 50 states, including the relevant state regulatory authority, typical cross-connection control program requirements, and links to official state and utility resources. Use it to understand the framework in your state, then confirm the specific requirements for your service area directly with your local water utility.

Cross Connection Control Program