Executive summary (what changed—and what didn’t)

In mid‑September 2025, the U.S. EPA asked the U.S. Court of Appeals for the D.C. Circuit to vacate and remand parts of EPA’s national drinking water standards for certain PFAS. The practical takeaway for beverage manufacturers is not “PFAS compliance is on hold.” It’s that federal limits and implementation details may be recalibrated—while state PFAS laws, customer specs, co‑packer requirements, and brand risk controls continue to tighten.

For facilities producing THC and CBD beverages, PFAS risk has an extra operational dimension: you often run high‑surface‑area processing (filtration, carbonation, emulsification), use concentrates and flavor systems, and rely on co‑packing or venue contracts that can impose PFAS requirements independent of federal drinking‑water law.

This post explains (1) what is likely to change at the federal level after the D.C. Circuit pause, (2) what will not change regardless of federal tweaks, and (3) a plant‑level action plan you can implement now—covering testing cadence, supplier attestations, treatment decision points, and waste handling.

Important: This is informational content for cannabis compliance and beverage QA teams; it is not legal advice.

The federal baseline: EPA’s PFAS drinking water rule (what it requires)

EPA finalized the National Primary Drinking Water Regulation (NPDWR) for a set of PFAS in 2024 under the Safe Drinking Water Act. While the rule regulates public water systems (PWS)—not beverage plants directly—its limits quickly become the de facto benchmark for incoming water specs, co‑packer quality agreements, and retailer compliance protocols.

Key elements (as finalized):

• Maximum contaminant levels (MCLs) set at extremely low parts‑per‑trillion levels for PFOA and PFOS.
• A hazard index approach (combined risk metric) for several additional PFAS (including PFHxS, PFNA, and HFPO‑DA (GenX)) rather than single‑compound MCLs.
• Monitoring and compliance timelines requiring PWS to begin monitoring and later meet standards on a multi‑year schedule.

Primary source:

• EPA PFAS drinking water rule overview: https://www.epa.gov/sdwa/and-polyfluoroalkyl-substances-pfas

Why beverage plants should care even if you are on municipal water:

• Your brand and retailers may treat EPA’s limits as a minimum for product safety.
• PFAS can enter finished products via water, ingredients, and contact materials.
• If you use private wells or blended sources, you may be functionally acting as your own water system for quality purposes.

What the D.C. Circuit pause likely changes at the federal level

EPA’s September 2025 action in the D.C. Circuit signaled that parts of the NPDWR may be vacated and remanded—meaning EPA would revisit aspects of the rule and potentially re‑issue revised requirements. While litigation details can be technical, for plant operators the most realistic federal “moving pieces” typically fall into four buckets.

1) Specific federal limits and the hazard index mechanics may be recalibrated

If EPA revises the rule, the most likely changes are:

• Adjustments to specific numeric thresholds (e.g., revisiting feasibility assumptions).
• Changes to how the hazard index is calculated, or which compounds it covers.
• Revisions to monitoring frequencies and system categorization.

Plant implication: If your internal specs (or customer specs) cite a specific federal number, you may need contractual language that tracks “current federal requirements as amended” without constantly renegotiating.

2) Monitoring, compliance deadlines, and reporting provisions could shift

Vacatur/remand frequently leads to:

• Re‑set or extended compliance milestones for certain systems.
• Revised implementation guidance.

Plant implication: Even if municipal systems get extra time, beverage plants do not—because your buyers can still require PFAS control now.

3) Enforcement posture could become less predictable short‑term

When parts of a rule are paused or remanded:

• EPA and states may issue interim guidance.
• Public water systems may slow capital projects while waiting for regulatory clarity.

Plant implication: Your incoming water quality could become more variable if your supplier delays treatment upgrades. You need a plan to verify and control water quality at the plant.

4) Federal risk narratives may shift, but litigation does not negate reputational exposure

Even if federal thresholds move:

• Plaintiffs, AGs, and consumer groups may continue to scrutinize PFAS.
• “PFAS‑free” marketing claims remain high‑risk.

Plant implication: Treat PFAS as a cross‑functional risk: quality, procurement, EHS, and communications.

What won’t change (and why beverage plants still must act now)

Federal recalibration does not remove the strongest, most immediate PFAS pressure points for THC/CBD beverage operations.

1) State drinking water standards and advisories keep tightening

Many states set their own PFAS standards, action levels, or notification thresholds that can be stricter than federal levels, and states can move faster than federal rulemaking.

Start your state tracking from:

• ASDWA PFAS state resources (industry association reference): https://www.asdwa.org/pfas/
• State environmental and health department PFAS program pages (varies by state)

Plant action: If you operate in multiple states, do not rely on a single federal number. Maintain a state-by-state PFAS requirements register as part of your cannabis compliance program.

2) State consumer product and packaging laws are independent of drinking water rules

Even if your water meets a federal MCL, you can still face PFAS constraints from:

• Food contact packaging restrictions (e.g., restrictions on intentionally added PFAS in certain packaging categories).
• State bans on PFAS in specific product categories.

Plant action: Treat packaging and processing aids as potential PFAS vectors and require supplier documentation.

3) Retailer, venue, and distributor specifications are already driving the market

Retailers and large venue buyers increasingly require:

• Supplier questionnaires
• Certificates of analysis (COAs) for contaminants
• Contractual warranties about restricted substances

Plant action: Build PFAS into your vendor qualification and finished-product release criteria, the same way you already manage pesticides, heavy metals, microbials, and residual solvents.

4) Co‑packing contracts shift liability to the brand—unless you manage it

Co‑packers may require brands to warrant ingredient compliance, while brands expect co‑packers to control processing contamination.

Plant action: Ensure your quality agreement clearly assigns PFAS responsibilities across water, ingredients, packaging, and rework.

PFAS risk map for THC/CBD beverage plants

PFAS is not only “a water problem.” In beverage operations, the most common vectors to assess are:

• Incoming water: municipal supply variability, well water, blended sources, carbon filtration performance.
• Ingredients: flavorings, emulsifiers, acids, sweeteners, botanical extracts, colorants, functional additives.
• Processing aids and maintenance: filter media, tubing, gaskets, lubricants, anti-foam agents, cleaning chemistries.
• Packaging and closures: liners, coatings, inks, adhesives.
• Rework and concentrates: higher solids can concentrate contaminants; emulsions can change extraction behavior during testing.

Plant-level action plan (what to change now)

The goal is to create a PFAS control program that is defensible, scalable, and contract-ready—even while federal terms are in flux.

1) Build a PFAS testing strategy you can sustain

A. Set testing targets (water + finished product)

At minimum, most beverage plants should consider:

• Source water (point-of-entry): verify what you receive.
• Post-treatment water (point-of-use): verify your controls.
• Finished beverage: verify the consumer-facing outcome.

Decision point: If your product is sold across multiple states, your finished-product PFAS approach should anticipate the most restrictive plausible state requirements or buyer specs.

B. Choose methods and labs deliberately

Work with accredited labs that can run PFAS at low detection limits using recognized methods.

Common U.S. drinking-water PFAS methods include:

• EPA Method 533
• EPA Method 537.1

For non-water matrices (finished beverages), labs may use modified approaches or other validated methods; matrix effects matter.

EPA PFAS analytical methods overview: https://www.epa.gov/pfas/epa-pfas-analytical-methods

Operational note: For beverages with emulsions/oils, confirm the lab can validate recovery and address matrix suppression.

C. Suggested cadence (practical starting point)

Your cadence should be risk-based. A workable baseline many plants adopt:

• Source water: monthly for the first 3 months, then quarterly if stable.
• Post-treatment water: monthly until treatment performance is demonstrated, then quarterly.
• Finished product: at launch of each SKU, then quarterly per facility, plus whenever there is a significant supplier/treatment change.

Trigger additional testing when:

• Your municipal supplier issues a PFAS notice.
• You change carbon/ion exchange media.
• You add a new flavor house, emulsifier, or extract input.
• You switch packaging materials.

2) Lock down procurement: supplier attestations + right-to-audit language

A. Supplier PFAS documentation package (minimum)

For high-risk ingredients and packaging, request:

• PFAS statement: whether PFAS are intentionally added.
• Restricted substances list (RSL) conformance.
• Change notification commitment (formulation, process, or sub-supplier changes).
• COA/COC availability where testing is performed.

Important: “No intentionally added PFAS” is not the same as “non-detect.” If you need non-detect performance for a buyer, define the analytical method and reporting limits in your contract.

B. Contract clause to handle shifting federal requirements

Because federal terms may change after the D.C. Circuit action, update contracts to reference:

• “Applicable federal and state requirements as amended”
• A defined process for spec updates (e.g., written notice + 60-day transition)

3) Treatment options: decision points for GAC vs ion exchange vs RO

PFAS control often turns into a water-treatment decision. The right choice depends on influent PFAS profile, flow rates, and operational tolerance.

A. Granular activated carbon (GAC)

Use when:

• PFAS levels are low-to-moderate and primarily long-chain species.
• You can manage regular media change-outs.

Key control points:

• Establish breakthrough criteria (based on your internal spec).
• Track bed volumes, differential pressure, and sampling results.

B. Ion exchange (IX)

Use when:

• You need stronger removal for certain PFAS profiles.
• You want smaller footprint and potentially longer run times.

Key control points:

• Resin selection matched to influent chemistry.
• Clear plan for resin regeneration/disposal pathways.

C. Reverse osmosis (RO)

Use when:

• You need broad contaminant reduction beyond PFAS.
• You can manage concentrate/brine handling.

Key control points:

• Brine management (see wastewater section below).
• Membrane integrity testing and CIP impacts.

Implementation tip: For many beverage plants, a staged approach works: optimize upstream filtration + GAC/IX first, then add RO only if required by water quality or buyer specifications.

4) Manage PFAS-bearing concentrates, rework, and washwater

Even if PFAS originate outside your plant, your facility can become the point where PFAS are concentrated (filters, resins, RO brine) or enter waste streams.

A. Spent media and filters

• Treat spent GAC/IX media as potentially contaminated material.
• Use vendors with clear documentation on transport and end-of-life management.

B. RO concentrate/brine

• Characterize brine periodically if you run RO.
• Coordinate with your POTW/industrial pretreatment obligations.

C. CIP and washwater

• Review CIP chemicals and surfactants for PFAS-related concerns.
• Prevent cross-contamination by segregating streams when feasible.

Compliance cross-over: PFAS also intersects with broader federal chemical oversight and reporting frameworks. Monitor EPA updates via the PFAS portal: https://www.epa.gov/pfas

5) Quality system updates: make PFAS a controlled hazard

Even though PFAS is often discussed as an environmental contaminant, beverage operations should manage it through their existing food safety and quality architecture.

A. Update your hazard analysis / preventive controls

If you operate under FSMA-aligned preventive controls (or similar), update:

• Ingredient hazard analysis to include PFAS where relevant.
• Preventive controls: supplier controls, water treatment, and testing verification.

FSMA overview (FDA): https://www.fda.gov/food/guidance-regulation-food-and-dietary-supplements/food-safety-modernization-act-fsma

B. Align with state cannabis compliance expectations

Even where contaminant panels do not explicitly include PFAS, regulators increasingly expect:

• Documented QA rationale
• Traceable procurement controls
• Complaint handling and recall readiness

Operational advantage: A PFAS plan can reduce recall risk and strengthen investor/partner diligence.

Template: updating your Quality/Water Safety Plan (ready-to-adapt outline)

Use this as a practical internal template. Customize to your site and product portfolio.

1) Scope and objectives

• Define products, water sources, and facilities covered.
• Define internal PFAS specifications (water and finished product).

2) Roles and responsibilities

• QA: sampling plan, release criteria, CAPA.
• Engineering: treatment operation, maintenance, monitoring.
• Procurement: supplier qualification and contract controls.
• EHS: waste characterization and disposal.

3) Source water control

• Water source description (municipal, well, blended).
• Sampling points: point-of-entry and point-of-use.
• Treatment description and setpoints.

4) Testing plan

• Methods, labs, detection limits.
• Cadence and triggers for increased sampling.
• Data review and trending.

5) Supplier and packaging controls

• PFAS attestations and documentation.
• Change-control expectations.
• Incoming verification testing criteria.

6) Nonconformance and CAPA

• Action levels (internal limits).
• Hold/release decision tree.
• Root cause steps: water, ingredient, packaging, process aids.

7) Waste and byproduct management

• Media change-out procedures.
• Brine/wastewater handling plan.
• Vendor qualification for waste transport/disposal.

8) Recordkeeping and audit readiness

• Maintain PFAS testing results, chain-of-custody, calibration, maintenance logs.
• Annual management review.

Template: purchase contract and co-packer quality agreement upgrades (clauses to consider)

Add clear, non-ambiguous language that survives federal changes.

A. Definitions

• Define “PFAS,” “reporting limit,” “non-detect,” and “applicable requirements.”

B. Regulatory change clause

• “Supplier shall comply with all applicable federal, state, and local requirements as amended, including any revisions following federal court actions.”

C. PFAS warranty structure

• Option 1: “No intentionally added PFAS.”
• Option 2: “Meets specification X using method Y with reporting limit Z.”

D. Change notification

• 60–90 days’ notice for formulation or sub-supplier changes.

E. Right to audit and data access

• Audit rights for high-risk materials.
• Access to supporting test data upon request.

F. Remedies

• Rejection/return, cost allocation, recall cooperation, and indemnities.

Practical takeaways for 2026 beverage operations

• The D.C. Circuit pause makes federal PFAS details more fluid, but does not remove PFAS-driven buyer expectations.
• Treat PFAS as a multi-vector contaminant: water, ingredients, packaging, and processing aids.
• Implement a risk-based testing cadence and document triggers for escalation.
• Use contracts to stay aligned with shifting federal terms while preserving strong state and customer compliance coverage.
• Plan for waste streams (spent media, brine, washwater) so PFAS control doesn’t create downstream compliance surprises.

Next step: operationalize your PFAS compliance program

If you need help translating PFAS drinking water rule uncertainty into a plant-ready compliance program—testing plans, supplier language, and QA documentation—use https://cannabisregulations.ai/ to build and maintain a defensible, audit-ready framework for cannabis compliance, licensing, and evolving contaminant regulations.