Disinfection Byproducts (TTHM/HAA5) in Drinking Water: What a Violation Means for Small Water Systems

Disinfection byproducts (DBPs) in drinking water are the compliance issue most small systems do not see coming, because they are created by the very treatment that keeps the water safe. When chlorine or chloramine reacts with natural organic matter in the source water, it forms two regulated families of byproducts — total trihalomethanes (TTHM) and haloacetic acids (HAA5) — and together they account for roughly 39% of all open health-based violations on the EPA’s national record. If your system disinfects surface water or groundwater under the influence, a DBP exceedance is a live risk, and it is a chronic one. Check your water system’s compliance status free at orevant.com before you read another word, then come back for the detail.

What TTHM and HAA5 actually are

Disinfection is non-negotiable — it is what kills the pathogens that make water unsafe. But the disinfectant is not perfectly selective. When free chlorine reacts with naturally occurring organic material (decaying leaves, algae, and soil runoff), it produces trihalomethanes: chloroform, bromodichloromethane, dibromochloromethane, and bromoform, summed as TTHM. A related reaction produces the five regulated haloacetic acids summed as HAA5. The more organic matter in your source water and the longer the contact time, the more byproducts form — which is why surface water systems and groundwater systems with organic-rich source water carry the highest risk.

The limits you are held to, and how compliance is measured

Under the Stage 2 Disinfectants and Disinfection Byproducts Rule (40 CFR 141.64), the maximum contaminant level for TTHM is 0.080 mg/L (80 parts per billion) and for HAA5 is 0.060 mg/L (60 ppb). Two other byproducts are regulated separately: bromate at 0.010 mg/L and chlorite at 1.0 mg/L. Compliance is not based on a single grab sample — it is based on a locational running annual average (LRAA): the average of your quarterly samples at each compliance monitoring location over the year. That has a critical consequence for small systems: a single high quarter is not the violation. The violation happens when your running annual average crosses the MCL, and it can build slowly across four quarters before anyone realizes the trend is heading over the line.

What a DBP violation actually triggers

A TTHM or HAA5 exceedance is a health-based violation, but it is a chronic one — the health concern is long-term exposure, not an acute event. That places it in Tier 2 under the public notification rule (40 CFR 141.203), which means you must issue a public notice within 30 days (not the 24-hour clock that an acute contaminant like nitrate carries — see what a nitrate violation public notice obligates you to do). The notice goes to every person served, is posted publicly, and is filed with your state primacy agency. The exceedance is also written to your system’s EPA SDWIS record, where it stays until resolved and resurfaces at your next sanitary survey. Under the health-effects data behind the rule, people who drink water with TTHM above the MCL over many years may experience an increased risk of cancer and of liver, kidney, or central nervous system problems; HAA5 exceedances carry an associated cancer risk as well.

Why DBP violations recur — and why that changes your budget math

This is the part that separates a DBP violation from a one-time paperwork fix. A DBP exceedance is usually not solved by filing a report — it is solved by changing treatment, and often by optimizing disinfectant dose and contact time, adding precursor removal, or switching disinfectants, then re-sampling to prove the LRAA is back under the MCL. Because the LRAA is a rolling average, recovery takes multiple quarters. Systems that are over the limit tend to stay in a quarterly monitoring and reporting cycle for a long time, and re-exceedances are common when source-water organic levels spike seasonally. A one-time scan tells you where you stand today; only ongoing monitoring catches the next quarter’s drift before it becomes another notice and another state filing.

Oklahoma is the sharp edge of this problem

Oklahoma carries the highest volume of open health-based drinking-water violations of any state in the nation on current EPA records — and disinfection byproducts are the largest single driver of those, not nitrate and not lead. A large share of Oklahoma’s public water systems are small, rural, and surface-water or organic-rich groundwater systems that disinfect with chlorine, which is exactly the profile that produces TTHM and HAA5. If you operate a system in Oklahoma — or anywhere with organic-rich source water and chlorine disinfection — your DBP sampling calendar and violation history are the two numbers that decide whether the next notice surprises you. See how to prepare for a state drinking water inspection for the records an inspector will ask for first.

How Orevant maps your DBP obligations

Orevant reads your system’s EPA SDWIS record and maps your TTHM and HAA5 monitoring schedule, LRAA status, and any open violation onto a prioritized compliance roadmap, with each finding linked to the regulation it comes from. For a system in a DBP cycle, the $87/mo monitoring keeps the quarterly sampling, deadlines, and running-average trend on a calendar so the next exceedance is caught before it becomes a public notice. It is compliance information, not legal advice.

Check your water system’s DBP status — free at orevant.com (no account required).

Sources: EPA National Primary Drinking Water Regulations — Stage 2 Disinfectants and Disinfection Byproducts Rule (40 CFR 141.64); EPA Public Notification Rule (40 CFR 141.203); EPA SDWIS/Envirofacts public records.

FAQ

Is a TTHM or HAA5 exceedance an emergency I have to report in 24 hours?

No. Disinfection byproducts are a chronic, long-term health concern, so an exceedance is a Tier 2 violation with a 30-day public notice under 40 CFR 141.203 — not the 24-hour Tier 1 clock that applies to acute contaminants like nitrate. It still requires a public notice to every customer and a state filing, and it still sits on your SDWIS record until resolved.

Our last quarterly sample was high but under the limit. Are we in the clear?

Not necessarily. Compliance is measured on a locational running annual average, not a single sample. A single high quarter can be the first step of a trend that crosses the MCL over the next quarters. The time to act is when the trend starts climbing, not when the annual average officially exceeds the limit.

Does the $87/mo monitoring cover recurring DBP obligations?

Yes. Because DBP compliance is a rolling, quarterly obligation, the monitoring product is built for it: it keeps your sampling windows, LRAA status, and deadlines on a calendar and alerts you to regulatory changes and next due-dates so the next exceedance is caught before it becomes a public notice.