What Is Cross-Connection Control?

A cross-connection is any connection between a potable (drinking) water system and a non-potable source. Non-potable sources include contaminated water, chemicals, boilers, irrigation, and similar materials. If this connection is not protected, contamination can enter the drinking water supply through backflow.

What Is Backflow?

Backflow is the reverse flow of water into the potable system. It happens in two ways. Back-siphonage is caused by negative pressure in the supply system, such as a water main break, high fire flow, or other high demand. Backpressure occurs when downstream pressure exceeds the supply pressure, as can happen with boilers, pumps, or elevated storage tanks. Cross-connection control in Ontario is governed primarily by the Ontario Building Code (OBC) 7.6 – Protection from Contamination. The key requirements are that every potable water system shall be protected against contamination, and protection is required against both back-siphonage and backpressure. Backflow preventers must conform to CSA B64 Series standards, and devices must be accessible for inspection, maintenance, and testing.

Backpressure

Backpressure occurs when the pressure in the downstream system exceeds the supply pressure, forcing water back into the potable water system. Common causes: Pumps, boilers, elevated tanks, pressurized systems.

Example: A boiler system connected to the potable water line develops higher pressure than the city supply. Boiler water can be forced back into the drinking water system. Think: pressure pushing backwards.

Backsiphonage

Backsiphonage occurs when the supply pressure drops or becomes negative, creating a vacuum that pulls contaminated water back into the system. Common causes: Water main break, fire hydrant use, high system demand, supply shutoff. 

Example: A garden hose left in a bucket of dirty water. If the city's main pressure drops, the dirty water can be sucked into the drinking water system. Think: vacuum pulling backwards.

Capacity of Siphons

A siphon can lift water a maximum of about 10.3 m (33.9 ft) above the water source under perfect conditions. This limit exists because the lifting ability of a siphon is limited by atmospheric pressure. Atmospheric pressure at sea level can support a column of water about 33.9 ft high. If the vertical height exceeds this, the water column breaks and the siphon stops because a vacuum forms. In real situations, due to friction, dissolved gases, and imperfect vacuum, the practical maximum height is about 23–26 ft. Simple exam answer: The maximum theoretical height a siphon can lift water is 33.9 ft, limited by atmospheric pressure.

Types of hazards

Minor/Low Hazard: Cross-connections that affect only water aesthetics, such as taste, odour, or colour, with minimal or no health impact.

Moderate/Medium Hazard: Contaminants with a lower risk than severe hazards but still pose potential health threats (e.g., used water, food-grade additives, or water-based systems).

Severe/High Hazard: Substances that, if introduced into potable water, could cause illness, serious injury, or death (e.g., toxic chemicals, sewage, pesticides, or radioisotopes). These require high-level protection, such as a Reduced Pressure Zone (RPZ) device.

System Design Overview – Step by Step

  • Designing a cross-connection control system begins with identifying the hazard level. Hazards are classified as low, moderate, or high. 
  • Low hazard is aesthetic in nature, such as a carbonated beverage line. Moderate hazard involves a health concern, for example, a boiler with treatment chemicals. High hazard presents a toxic or severe health risk, such as sewage or certain lab chemicals. 
  • The hazard level determines the type of backflow prevention device required by the NPC and CSA B64 standards.
  • Air Gap (AG) is the most effective form of protection, providing a physical vertical separation between the water outlet and the flood rim with no moving parts. The required air gap is typically 2× the supply pipe diameter, with a minimum of about 25 mm. Used for indirect waste connections, RO reject drains, and chemical tanks. 
  • Atmospheric Vacuum Breaker (AVB) protects against back-siphonage only and cannot protect against backpressure. It must be installed downstream of a shutoff valve and cannot be under continuous pressure. Commonly used for hose bibs and irrigation zones where there is no backpressure risk. 
  • Pressure Vacuum Breaker (PVB) protects against back-siphonage and can be under continuous pressure. Installed above the downstream piping and common in irrigation systems. 
  • Double Check Valve Assembly (DCVA) protects against both backpressure and back-siphonage and is suitable for low to moderate hazard situations. Contains two independent check valves, test ports, and shutoff valves and requires annual testing in most municipalities. Typical applications include fire sprinkler systems (non-chemical) and some commercial water services. 
  • Reduced Pressure Principle Assembly (RPZ or RPBA) offers the highest mechanical protection and is required for high-hazard connections. Contains two check valves, a differential pressure relief valve, test cocks, and shutoffs. If either check valve fails, the relief valve discharges water. Used for boilers with chemicals, chemical feed systems, medical or lab facilities, and commercial buildings with significant hazard risk.

Device Selection Guide

*Always verify the chosen device with your local jurisdiction authority.*

Installation Requirements

Accessibility (NPC 2.6.1.6): Devices must be installed where they are easily accessible, serviceable, and testable, and protected from freezing. Drainage for RPZ: RPZ valves must have adequate floor drain capacity and may require indirect waste discharge where required. Clearance: Follow manufacturer specifications for height above the floor and provide side clearance for testing.

Design Calculations

Air Gap Sizing: Minimum air gap is 2× the supply pipe diameter and must not be less than 25 mm. 

Pressure Loss Through Devices: Backflow prevention devices cause a pressure drop. Typical losses are DCVA 3–10 psi and RPZ 5–15 psi. Calculate available pressure minus device loss minus elevation loss to determine fixture pressure.

Flow Rate Sizing: The device must match building demand. Use Fixture Unit calculations per OBC Part 7 tables and convert to L/s or GPM. Select a device rated above peak demand.

Testing & Maintenance

Most municipalities require a certified tester, a tagged device, and recorded test results. Failure to maintain compliance constitutes a violation of municipal cross-connection programs.

Typical Plumbing Layout Example

The municipal water service feeds the water meter and then the main backflow preventer (RPZ or DCVA, depending on hazard). From there, the building distribution system provides water to various equipment, each potentially requiring its own backflow protection, such as a boiler RPZ or an irrigation PVB.

Common Plumbing Applications

Irrigation systems typically use a PVB or RPZ. Boilers with chemicals require an RPZ. Fire systems (wet) commonly use a DCVA, while fire systems with antifreeze use an RPZ. Commercial kitchens generally employ RPZ protection, and lab sinks may require an air gap or RPZ.

Types of Isolation

Device Isolation: Isolation at the individual backflow prevention device or valve, separating the device and its upstream supply from the downstream distribution or equipment during service, testing, or repair.

Premise (or Point-of-Use) Isolation: Isolation at the level of the building premises or a major subsystem, designed to protect the internal distribution from backflow or to protect the main supply from contamination entering the building. 

Room (or Zone) Isolation: Isolation at a more granular level, protecting specific rooms, zones, or pieces of equipment with dedicated backflow protection closer to the hazard source.

Key Exam & Field Points

Always determine the hazard level first, then follow NPC 2.6 and CSA B64 standards. Ensure devices are accessible and testable, and account for pressure loss in system design. Install proper drainage for RPZ relief discharge. Annual testing is standard practice in Ontario.

Quick Definitions

Isolation examples

Device Isolation (Boiler Makeup Water)

A hydronic heating boiler connects to the potable water supply for makeup water. The problem is that boiler water often contains treatment chemicals and operates under pressure — that combination creates a real backpressure hazard. In this case, device isolation is the right approach. A reduced-pressure backflow preventer (RP) gets installed directly on the boiler supply line. The rest of the building's plumbing isn't the concern here — it's just that one connection — so there's no reason to protect the entire system. The RP assembly handles it at the source and keeps any contaminated boiler water from making its way back into the potable supply.

Premise Isolation (Entire Building Protection)

Some commercial buildings have so many potential contamination hazards — boilers, chemical equipment, irrigation systems, process equipment — that protecting each one individually isn't practical. In that situation, a backflow preventer gets installed at the building's water service entrance instead, covering everything behind it in one shot. This is called premise isolation. A reduced-pressure backflow preventer goes in after the water meter or at the building control valve, right where the service enters the building. The authority having jurisdiction often requires this approach when multiple hazards exist throughout a facility. Rather than tracking down every individual connection, the entire building is isolated from the municipal supply at a single point.

Mock C of Q Question 

A commercial building has a hydronic heating boiler connected to the potable water system for make-up water. The boiler uses chemical treatment and operates at a pressure higher than the potable water supply pressure.

According to the National Plumbing Code, what type of backflow protection is required?

A. Atmospheric vacuum breaker

B. Double check valve backflow preventer

C. Reduced-pressure principle backflow preventer

D. No protection required if a shut-off valve is installed

Correct Answer

C — Reduced-pressure principle backflow preventer

Step-by-Step Reasoning with Code References

1. This is a cross-connection hazard

The boiler:

  • Contains chemicals
  • Can operate at higher pressure
  • Is connected to potable water

This creates both:

  • Backpressure risk
  • Health hazard contamination risk

Under the National Plumbing Code

2.6.2.1. Protection from Contamination

Connections to potable water systems shall be protected against contamination.

Boiler water is not potable.

Protection required

2. Hazard level determines device type

NPC requires stronger protection for higher hazards.

2.6.2.2. Backflow Preventers

Where a severe health hazard may exist, an approved backflow preventer, such as a reduced-pressure principle device, shall be installed.

A boiler with chemicals = high hazard

Therefore → RP required

3. Why RP is required

Reduced pressure backflow preventer protects against:

  • Backpressure
  • Backsiphonage
  • High hazard contamination

This makes it the correct device.

4. Why the other answers are wrong

A — Atmospheric vacuum breaker

Only protects against back-siphonage

Not allowed for high hazard

B — Double check valve

Allowed for low / moderate hazard

Not for chemical contamination

D — Shut-off valve

No backflow protection

Want to pass your Red Seal plumbing  exam on the first try?

Download now to access 500+ practice questions and master the Red Seal Plumbing!

a student passing their exam using Dakota Prep