Bottled Water Safety and Compliance

Bottled water safety in the United States means meeting two FDA rulebooks: current good manufacturing practices for processing and bottling under 21 CFR Part 129 and a standard of identity and quality under 21 CFR 165.110 that FDA keeps at least as protective as EPA's tap-water limits.

Bottled water is a packaged food, so FDA regulates it as one, with a twist most food categories do not have: a dedicated CGMP part written only for water, plus a numeric quality standard that tracks EPA's drinking-water limits by law. This guide covers who regulates what, what Part 129 and 165.110 actually require, how the sampling schedule works, and where FDA's bottled-water limits differ from EPA's tap-water limits.

What is bottled water safety?

Bottled water safety is the set of controls that keep packaged water free of harmful contaminants from source to sealed bottle. In regulatory terms it is compliance with FDA's bottled-water CGMPs (Part 129), its identity and quality standard (165.110), and the general food-adulteration provisions of the Federal Food, Drug, and Cosmetic Act.

The word "safety" here covers four hazard families, and FDA's quality standard has a numeric limit list for each: microbiological (coliform bacteria), physical (turbidity, color, odor), chemical (more than 70 inorganic and organic substances), and radiological (radium, alpha, and beta/photon activity). A bottler that meets all four categories and runs a clean plant under Part 129 has met the federal bar. Everything else, third-party audits, retailer schemes, trade-association certification, sits on top of that floor.

Who regulates bottled water, FDA or EPA?

FDA regulates bottled water; EPA regulates public tap water. They are two agencies under two different laws, and the split confuses people because the numbers are nearly identical on purpose.

EPA sets National Primary Drinking Water Regulations for public water systems under the Safe Drinking Water Act. FDA regulates bottled water as a packaged food under the Federal Food, Drug, and Cosmetic Act. The bridge between them is Section 410 of the FFDCA which requires that FDA's bottled-water quality standard be no less protective of public health than EPA's tap-water limits. Whenever EPA sets or revises a drinking-water regulation, FDA must either amend 165.110 to match or publish its reasons for not doing so.

What does 21 CFR Part 129 require?

Part 129 is the bottled-water CGMP: the plant-and-process rules that sit alongside the general food CGMP in 21 CFR Part 117. It covers five areas, source approval, plant construction and design, sanitary facilities and operations, equipment, and production and process controls, and it is prescriptive in ways the general food rule is not.

• Source approval. The water source, whether an approved public supply or a private source, has to be inspected and sampled, and protected from contamination. A private source cannot just be tapped, it must be shown to be safe.
• Plant and grounds. Construction that keeps contamination out, protects openings, and separates the water-contact areas from everything else.
• Sanitary facilities and operations. Product-water and washing systems, plus the sanitizing of every water-contact surface, container, and closure.
• Equipment. Sanitary design, corrosion-resistant contact surfaces, and multiple-use containers that can actually be cleaned.
• Production and process controls. The washing and sanitizing of containers, the filling and capping under sanitary conditions, and, the part that gets audited hardest, a written sampling and testing schedule.

Part 129 also carries an unusual record obligation: bottlers must keep source-approval records, and the sampling and testing records described below, and make them available on inspection. This is the same discipline any HACCP program lives on, controls only count if you can prove they happened.

What are the bottled water quality standards in 21 CFR 165.110?

Section 165.110 does two jobs. Subsection (a) is the standard of identity what you can legally call each type of water. Subsection (b) is the standard of quality the numeric contaminant limits the finished product must meet.

The identity definitions decide the words on your label, and FDA is specific:

The quality standard in 165.110(b) is the safety core. It sets allowable levels across four categories, and a product over any limit is misbranded or adulterated unless labeled with a specific statement of substandard quality.

How does the FDA sampling schedule work?

Part 129 sets minimum testing frequencies, and they differ for source water and finished product water. Building the calendar right is the single most common gap FDA and third-party auditors find.

• Source water (non-public source), coliform: at least once each week.
• Source water, chemical contaminants: at least once each year.
• Source water, radiological contaminants: at least once every four years.
• Product (finished) water, bacteriological: at least once each week, for each type of water produced during a day's production.
• Product water, chemical/physical/radiological: at least once each year, on a representative sample from a batch or segment of a continuous run, for each type produced.

A weekly coliform result over the microbiological limit means the water is adulterated and cannot ship as bottled water. The testing itself has to be run to the methods FDA references, and the instruments used to control the process, conductivity meters, ozone monitors, pH probes, need a real calibration program behind them, or the numbers on the log do not defend anything.

How do FDA bottled water limits compare to EPA tap water limits?

They are mostly identical, because Section 410 forces FDA to keep pace with EPA. Where they differ, FDA's bottled limit is usually the same number or tighter, the clearest example being lead.

The lead difference is the one worth remembering: FDA set 5 ppb for bottled water because there are no lead pipes between the plant and the bottle, so the tap-water allowance built around plumbing corrosion does not apply. For most other contaminants, the bottled number and the tap number are the same figure.

How do you build a bottled water safety program?

Layer the FDA requirements into one running system rather than treating each rule as a separate binder. A workable build order:

1. Approve and protect the source. Document the source, inspect it, sample it, and put source protection in writing, this is the foundation Part 129 checks first.
2. Write the Part 129 CGMP program. Plant and equipment sanitary design, container washing and sanitizing, filling and capping controls, and personnel practices, each with a named owner.
3. Build the 165.110 quality-limit sheet. List every applicable microbiological, physical, chemical, and radiological limit and the method that measures it, so a result can be judged pass or fail on the spot.
4. Set the sampling calendar. Weekly coliform on source and product, annual chemical and physical, four-year radiological, with reminders that cannot silently lapse.
5. Layer a hazard analysis on top. Run the process through HACCP (or preventive controls) so ozonation, UV, filtration, or a 5-log step is validated and monitored as a control, not just a piece of equipment.
6. Calibrate and verify. Keep every in-line and lab instrument on a traceable calibration schedule, and review records before product ships.
7. Keep retrievable records. Source approval, sampling results, sanitation, and calibration, legible, dated, and fast to pull when an investigator or customer asks.

What is the stat picture, from primary sources?

Numbers a bottler can take to a compliance review, all from federal sources:

• Processing and bottling of bottled drinking water is governed by 21 CFR Part 129 (CGMP: source approval, plant, equipment, and process controls).
• The identity and quality standards live in 21 CFR 165.110 with allowable levels for more than 70 chemical contaminants plus microbiological, physical, and radiological limits.
• Coliform testing minimum: at least once each week for both non-public source water and finished product water (21 CFR 129.35 and 129.80).
• Section 410 of the FFDCA requires FDA's bottled-water standard to be no less protective than EPA's tap-water limits, and to respond every time EPA revises a drinking-water regulation. See FDA's consumer guidance, Bottled Water Everywhere: Keeping it Safe.

What trips up bottlers on audit?

Almost never the water chemistry, the sampling records. A missed weekly coliform test, an annual chemical panel that slipped a quarter, an ozone or conductivity reading logged from an uncalibrated meter, a source-approval file no one can find. Bottled water runs on a fixed testing calendar, and the failure mode is a lapse in that calendar, not a bad aquifer.

That is exactly where digitized capture earns its keep. When sampling schedules, sanitation checks, and calibration are tracked as live data instead of a wall calendar and a clipboard, a missed test surfaces the same day instead of at the annual review, and any record an investigator asks for is a search away. That is how Harmony works with food and beverage plants: paper logs and checklists become live, searchable records, and years of specs and results become answerable in plain English, layered on the systems you already run, no rip-and-replace. One beverage manufacturer replaced paper production logging entirely and automated its daily reporting; the same foundation is what makes a bottled-water sampling program impossible to quietly fall behind on. Bottlers who want the retail-scheme layer on top can move that work straight into SQF or another GFSI-recognized scheme.