PFAS Regulations Explained: EPA Standards and Compliance Requirements

If you've been trying to keep up with PFAS regulations, you already know the frustration. The rules are moving fast, they don't always align across agencies, and the gap between "what's finalized" and "what's coming" is wide enough to create real operational uncertainty.

Articles on PFAS regulations tend to list the rules in broad strokes without getting into what they actually require of businesses: which programs apply, which compounds are covered, what the deadlines are, and what happens when federal and state requirements point in different directions.

This post is here to fill that gap. Written by the PFAS experts at Reworld®, our Ultimate Guide to PFAS covers the full landscape of PFAS management, including why the regulatory environment is so complex. This post goes deeper on the regulations themselves: what they are, what they require, and what businesses need to do to stay compliant as the rules continue to evolve.

What Are PFAS Regulations, and Why Do They Matter Now?

PFAS regulations are legal requirements that govern how per- and polyfluoroalkyl substances are manufactured, used, reported, disposed of, and cleaned up. They exist because PFAS don't break down in the environment, have been linked to serious health effects, and have contaminated drinking water and soil across the country in ways that are difficult and expensive to address.

What makes PFAS regulations different from most environmental rules is their scope. They don't target one industry or one type of facility. They cut across manufacturing, distribution, waste handling, water treatment, and land use, meaning a company can be subject to PFAS compliance requirements without ever intentionally using PFAS in its own operations.

The regulatory direction is clear, even when specific rules are still in flux: more compounds will be covered, more activities will require reporting, and the bar for what counts as acceptable management is rising.

Why Compliance Is Harder Than It Looks

Most environmental regulations target a specific activity or substance in a defined context. PFAS regulations don't work that way. They span multiple federal programs, each with different scopes and enforcement mechanisms, and are layered on top of an increasingly active set of state-level requirements.

A company operating in multiple states may face different product restrictions, different disclosure obligations, and different wastewater limits depending on where it operates. And because the federal and state frameworks don't always align, what satisfies one jurisdiction may not satisfy another.

That's the core challenge. It's not just that the rules are complex. It's that they're moving in multiple directions at once, and the cost of getting it wrong through cleanup liability, reporting violations, or supply chain disruption is significant.

EPA PFAS Regulations: The Federal Framework

The EPA has been the primary driver of federal PFAS regulation, working across several programs simultaneously. Each one targets a different part of the PFAS lifecycle, and together they create a web of obligations that companies need to track carefully.

Drinking Water Standards (Safe Drinking Water Act)

In April 2024, EPA issued the first-ever national, legally enforceable drinking water standards for PFAS, establishing Maximum Contaminant Levels (MCLs) for six compounds. The standards set enforceable limits for PFOA and PFOS at 4 parts per trillion (ppt), with separate limits for PFHxS, PFNA, and HFPO-DA (GenX) at 10 ppt each. Public water systems have until 2029 to comply with solutions that reduce PFAS levels if monitoring shows violations. EPA has recently proposed extending the compliance deadline and reducing the number of PFAS compounds regulated. Pending legal challenges are likely to further complicate the PFAS regulatory landscape.

CERCLA Hazardous Substance Designation

In April 2024, EPA announced the designation of PFOA and PFOS as hazardous substances under the Comprehensive Environmental Response, Compensation, and Liability Act (CERCLA)—also known as Superfund—with the rule taking effect July 8, 2024. The practical consequences of the CERCLA designation are significant for any company that has handled, stored, or disposed of PFOA or PFOS. Under CERCLA, hazardous substance designations carry cleanup authority, liability exposure, and release reporting requirements.

Toxics Release Inventory (TRI) Reporting

As of Reporting Year 2026, 206 PFAS substances are covered under TRI. PFAS designated as "chemicals of special concern" are ineligible for the de minimis exemption that applies to most other TRI chemicals, meaning even trace quantities must be reported. This is a significant operational shift for facilities that have never had to track PFAS at those concentration levels before.

TSCA Reporting and Recordkeeping

The EPA's TSCA Section 8(a)(7) PFAS Reporting Rule requires manufacturers and importers of PFAS to submit data on their usage of PFAS substances going back to January 1, 2011. This rule captures a broad population of companies, including those that may not think of themselves as PFAS manufacturers, because it covers any entity that has imported products containing PFAS at any point during that window. Similar to the federal drinking water standards, EPA has proposed significant changes to this rule that may impact the scope and extent of required reporting.

Clean Water Act and Stormwater

The EPA's proposed 2026 Multi-Sector General Permit (MSGP) would require operators in 23 of the 30 industrial sectors covered by the permit to conduct quarterly "report-only" indicator monitoring for 40 PFAS compounds. The monitoring would be report-only, meaning no benchmark threshold or required corrective action, but it would still require facilities to test and disclose results. The permit is still pending finalization, but it signals that PFAS monitoring requirements are moving into stormwater management, an area many companies haven't had to consider in the context of PFAS.

State PFAS Regulations: A Growing Patchwork

Federal rules set a floor, but states are often moving faster and going further. The result is a compliance environment where the most stringent requirement in any state where you sell, distribute, or operate effectively becomes your national standard.

As of 2026, more and more states have enacted or are actively developing PFAS-specific legislation. The requirements vary widely, but a few states have established frameworks that are already creating real compliance obligations.

Minnesota

Minnesota's PFAS statute, known as Amara's Law, is among the most comprehensive state PFAS laws in the country. It requires any manufacturer of a product sold, offered for sale, or distributed in Minnesota that contains intentionally added PFAS to report to the Minnesota Pollution Control Agency (MPCA) and pay a fee.

Initial reports are due September 15, 2026, submitted through the state's PRISM reporting system. The reporting obligation extends to any manufacturer whose products are sold or distributed in Minnesota, regardless of where the company is headquartered. Products manufactured before July 1, 2023, are excluded.

Maine

Maine has enacted a phased sales prohibition program. Products prohibited from sale in Maine as of January 1, 2026 include cleaning products, cookware, cosmetics, dental floss, juvenile products, menstruation products, ski wax, textile articles, and upholstered furniture. By January 1, 2032, the prohibition expands to cover all products containing intentionally added PFAS unless the Maine DEP designates the use as a Currently Unavoidable Use (CUU).

Connecticut

Connecticut's DEEP issued a labeling order, specifying approved language for products containing intentionally added PFAS. Beginning July 1, 2026, covered products must carry a visible label stating "Contains PFAS" or similar approved language, and manufacturers must submit notification forms to DEEP. A full sales ban on covered product categories follows on January 1, 2028.

What the State Patchwork Means in Practice

The practical challenge is that "intentionally added PFAS" is defined differently across states, and exemptions vary. A product that qualifies for a CUU exemption in Maine may not qualify under Minnesota's framework. Companies operating nationally need to track each state's specific definitions, exemptions, and timelines, not just the headline prohibition dates.

As Joseph Walsh, Sr. Director of Environmental at Reworld, put it: "You have a patchwork of different requirements in potentially 50 different states. It's hard to run your business when you have those kinds of challenges."

What PFAS Compliance Actually Requires of Businesses

Understanding the rules is step one. Translating them into operational requirements is where most companies run into difficulty.

PFAS compliance isn't a single action. It's a set of ongoing obligations that can touch different parts of your organization, from procurement and product development to waste management and environmental reporting. Here's what it actually looks like in practice.

Know What You Have

Before a company can comply with PFAS regulations, it needs to understand where PFAS exist in its own operations. That sounds straightforward, but it's not. PFAS can be present in raw materials, components, coatings, packaging, and process inputs without being explicitly identified in product specifications or supplier disclosures.

Compliance programs that skip this step create problems downstream. If you don't know where PFAS are, you can't accurately complete TRI reports, respond to state product disclosure requirements, or make defensible decisions about how to manage waste.

Track and Report Accurately

Several federal and state programs now require companies to track and report PFAS in specific ways:

• TRI reporting covers 206 PFAS substances, with Reporting Year 2025 reports due July 1, 2026. PFAS classified as chemicals of special concern are ineligible for the de minimis exemption, meaning even trace quantities trigger reporting.
• TSCA Section 8(a)(7) reporting requires manufacturers and importers to disclose PFAS usage data going back to 2011. The submission window is actively shifting following EPA's April 2026 update; companies should monitor the EPA's TSCA page for the latest regulatory deadline.
• State product reporting (Minnesota, Maine, Connecticut, and others) requires disclosure of intentionally added PFAS in products sold or distributed in those states.

The reporting obligations are not just paperwork. They require companies to know what PFAS are in their products and at what concentrations, which often means going deeper into the supply chain than companies have previously had to go.

Manage Waste in Ways That Hold Up Over Time

This is where compliance intersects most directly with operations. PFAS-containing waste can't simply be sent to a landfill and considered appropriately managed. Landfills don't destroy PFAS, and disposal pathways that are acceptable today may create liability exposure tomorrow as regulations evolve and cleanup standards tighten.

The compliance question isn't just "where does this waste go?" It's "what happens to the PFAS after it gets there, and can I demonstrate that it was handled responsibly?"

That distinction matters more as documentation requirements increase. Regulators, customers, and investors are asking for evidence of how PFAS are managed, not just assurances that they were disposed of.

Obtain PFAS Compliance Documentation

PFAS compliance may include the need for documentation that verifies how PFAS-containing material was handled, treated, or destroyed. As transparency requirements expand, more companies are being asked to provide this kind of documentation to regulators, customers, and business partners.

This type of documentation is becoming a baseline expectation, particularly for companies in regulated industries or those with customers that have their own PFAS commitments.

Plan for What's Coming, Not Just What's Here

The regulatory landscape is still developing. Rules that are proposed today will be finalized in the next 12 to 24 months. New compounds will be added to covered lists. State requirements will expand. Legal challenges will continue. The companies that are best positioned are those that have built processes flexible enough to adapt, rather than those that are optimized for the minimum required today.

Frequently Asked Questions About PFAS Regulations

What Are PFAS Regulations?

PFAS regulations are legal requirements governing how per- and polyfluoroalkyl substances are manufactured, used, reported, disposed of, and remediated. In the U.S., they exist at both the federal level and at the state level. Requirements vary by program and jurisdiction.

Are PFAS Regulated at the Federal Level?

Yes. The EPA has established federal PFAS regulations through multiple programs. PFOA and PFOS have been designated as hazardous substances under CERCLA, enforceable drinking water MCLs have been set at 4 parts per trillion for PFOA and PFOS, 206 PFAS compounds are now covered under TRI reporting, and TSCA requires manufacturers and importers to report PFAS usage data going back to 2011.

What Is the EPA's Current Drinking Water Standard for PFAS?

The EPA's April 2024 National Primary Drinking Water Regulation established MCLs for six PFAS compounds. PFOA and PFOS are set at 4 ppt each; PFHxS, PFNA, and HFPO-DA (GenX) are set at 10 ppt each. Public water systems have until 2029 to comply with solutions that reduce PFAS if monitoring shows violations.

What Does PFAS Compliance Require for Businesses?

PFAS compliance requirements vary depending on the type of business and where it operates. Common obligations include: identifying where PFAS are present in products, processes, and waste streams; completing TRI and TSCA reporting as applicable; complying with state product disclosure and sales prohibition laws; managing PFAS-containing waste through approaches that reduce long-term liability; and maintaining documentation of how PFAS are managed. For companies with PFAS in their waste streams, the choice of disposal method increasingly matters for both regulatory and liability reasons.

How Do State PFAS Regulations Differ from Federal Rules?

State PFAS regulations often go further than federal rules, covering more compounds, more product categories, and shorter timelines. State requirements apply based on where products are sold or distributed, not where they're manufactured, meaning a company selling nationally may need to comply with the most stringent state in its market.

What New PFAS Regulations Are Coming?

Several significant rules are in development or recently updated. Multiple states are advancing product prohibition, labeling, and reporting requirements with deadlines in 2026 and beyond. The regulatory trajectory is toward broader coverage and more stringent requirements.

How Reworld Supports PFAS Compliance: ReAssure™ PFAS Destruction

Compliance with PFAS regulations isn't just about tracking and reporting. At some point, the PFAS-containing material has to go somewhere, and where it goes, and what happens to it there, is increasingly part of what regulators, customers, and auditors want to know.

That's where the disposal method matters as much as documentation.

Landfills can accept PFAS-containing waste, but they don't destroy it. Filtration systems can remove PFAS from landfill leachate streams, but the concentrated treatment residuals still have to be appropriately managed. These approaches can satisfy today's requirements in some cases, but they create uncertainty about tomorrow's liability, especially as cleanup standards tighten and the CERCLA designation for PFOA and PFOS expands the pool of potentially responsible parties.

Destruction is an entirely different outcome. When PFAS chemical bonds are broken, they no longer persist, accumulate, or create downstream exposure. That's the standard Reworld Thermomechanical Treatment Facilities (TTFs) are built to meet.

Reworld TTFs: Engineered for PFAS Destruction

Reworld TTFs operate under sustained high temperatures above 1,100°C (2,012°F) in controlled combustion environments specifically designed to break down a wide scope of materials, including the carbon-fluorine bonds that make PFAS persistent. This isn't a standard incinerator handling PFAS as best it can. The engineering, operating parameters, and monitoring protocols present within regular TTF operations are ideal for the specific requirements of PFAS destruction.

Reworld TTFs have been independently validated through an EPA study conducted at our Lake County Florida facility, providing the kind of documented, third-party verification that regulators and customers are increasingly demanding.

ReAssure™ PFAS Destruction: End-to-End Managed Solution

Reworld ReAssure™ PFAS Destruction program delivers PFAS management as a complete, documented process:

• Handles PFAS across liquids, solids, and residual materials
• Routes materials through TTFs that destroy 99% of PFAS-containing material at temperatures above 1,100°C
• Provides certificates of destruction, chain-of-custody tracking, and audit-ready documentation
• Backed by independent EPA validation at our Lake County Florida facility
• Supported by a nationwide network of facilities for geographic reach and operational flexibility

The Certificate of Destruction that comes with ReAssure™ is specifically designed to meet the documentation needs that PFAS compliance is creating. Whether you're responding to a customer questionnaire, preparing for a regulatory audit, or managing ESG disclosures, having verifiable proof of how PFAS were destroyed is increasingly the difference between a defensible compliance record and an avoidable compliance risk.

If you're working through what PFAS regulations mean for your operations, or trying to build a compliance approach that holds up as the rules continue to evolve, our team can help you assess where you stand and identify a path forward.

Connect with us to start the conversation.