6.2 Evidence Identification, Collection & Chain of Custody Protocol

Evidence Identification, Collection & Chain of Custody Protocol

In legal proceedings across British Columbia, the outcome of criminal trials, civil litigation, and administrative hearings depends heavily on the integrity of evidence gathered at the scene. Security professionals play a pivotal role in the evidentiary process. A single procedural error—such as mishandling a discarded weapon, failing to secure CCTV footage, or breaking the documented chain of custody—can result in critical evidence being ruled inadmissible in court under the Canada Evidence Act and the Canadian Charter of Rights and Freedoms.

Categorization of Evidence

To handle evidence correctly, security personnel must recognize the three fundamental legal classifications of evidence:

1. Physical (Real) Evidence: Tangible, concrete objects directly tied to the commission of an offense or incident. Examples include weapons (firearms, knives, blunt instruments), forced entry tools (crowbars, bolt cutters), bodily fluids (blood, saliva), footwear impressions, discarded clothing, stolen merchandise, and illicit narcotics.
2. Digital and Documentary Evidence: Information stored in electronic or physical written formats. Examples include closed-circuit television (CCTV) footage, electronic access control logs, digital photographs, alarm system event records, visitor ledgers, shift notebooks, and formal incident reports.
3. Testimonial Evidence: Sworn oral statements or written affidavits provided by victims, eyewitnesses, suspects, or security professionals detailing their direct sensory observations (what they saw, heard, smelled, or felt).

graph LR
    A[Evidence Management Framework] --> B[Physical / Real Evidence]
    A --> C[Digital / Documentary Evidence]
    A --> D[Testimonial Evidence]
    B --> E[Preserve In Place via Perimeter Control]
    C --> F[Export Native File + Cryptographic Hash]
    D --> G[Record Verbatim Contemporaneous Statements]
    E --> H[Emergency Collection if Threat Imminent]
    H --> I[Unbroken Chain of Custody Documentation]

The Fundamental Directive: Preserve, Do Not Collect

The core rule governing security personnel in British Columbia regarding physical evidence is preservation in place. Security guards are not police forensic specialists. Unless an item faces immediate, unavoidable destruction, security personnel must never touch, pick up, move, or alter physical evidence.

Standard Preservation Rules

• Maintain Original Location and Orientation: The exact spatial position of an object relative to walls, doors, or victims provides forensic investigators with vital data needed to reconstruct events (e.g., bullet trajectories or blood spatter patterns).
• Prevent Biological and Fingerprint Contamination: Touching an item transfers human skin oils, sweat, and DNA, obliterating latent fingerprints and contaminating biological samples.
• Shield from Environmental Degradation: If weather threatens outdoor evidence, shield it without making direct contact. For example, place an inverted clean cardboard box or plastic dome over footprint impressions or blood droplets until police forensic units arrive.

Exceptions Permitting Emergency Collection

Security personnel are authorized to physically collect evidence only under extreme, urgent circumstances where leaving the item in place will guarantee its destruction or loss before law enforcement arrives. Examples include:

• Outdoor physical evidence (e.g., discarded drug powder, paper receipts, or clothing) exposed to heavy rain, rising floodwater, or high winds.
• A weapon discarded in a public thoroughfare where an aggressive crowd or passing pedestrian is actively attempting to grab it.
• Evidence located on a fire scene directly in the path of advancing flames or suppression water.

When emergency collection is executed, the security professional must photograph or sketch the item in its original position prior to touching it, wear clean nitrile gloves, and document the precise emergency justification in their notebook.

Evidence Handling, Packaging, and Hazards

Different types of physical and digital evidence require specialized handling techniques to preserve their evidentiary value and protect security personnel from hazardous materials.

Digital Evidence Preservation Protocols

Digital video surveillance is often the most compelling evidence presented in court. To maintain its legal validity:

1. Immediate Lockout: Immediately isolate and lock the target video sequence on the Network Video Recorder (NVR) to prevent automated overwrite cycles.
2. Native Export Format: Always export footage in its original proprietary format (.dav, .asf, etc.) along with the manufacturer's standalone viewing utility. Converting video to common MP4 or AVI formats compresses data, removes embedded frame-by-frame metadata, and exposes the footage to defense challenges regarding digital manipulation.
3. Time Verification: Document any discrepancy between the NVR system clock and actual atomic time (e.g., "NVR clock is 4 minutes and 12 seconds fast").

The Chain of Custody Protocol

The Chain of Custody (also termed continuity of evidence) is the unbroken, meticulously documented ledger tracking the location, custody, and transfer of a physical exhibit from the moment of discovery to its final presentation in court.

graph TD
    A[Evidence Discovered / Emergency Seized] --> B[Initiate Evidence Tag & Log Entry]
    B --> C[Package in Approved Media & Apply Tamper Seal]
    C --> D[Store in Restricted Access Lockbox / Safe]
    D --> E[Formal Transfer to Police Forensic Unit]
    E --> F[Dual-Signoff on Continuity Log]
    F --> G[Court Presentation as Marked Exhibit]

Legal Necessity of Unbroken Continuity

For physical evidence to be admitted at trial, the party presenting it must prove two elements beyond a reasonable doubt:

1. The exhibit presented in court is the exact same item recovered at the scene.
2. The exhibit has not been altered, tampered with, contaminated, or substituted while in custody.

If a gap occurs in the documentation—such as an unrecorded overnight storage period or an unsigned transfer—the defense will move to exclude the exhibit. The trial judge will typically exclude compromised evidence, which can severely weaken or dismantle the prosecution's case.

Mandatory Chain of Custody Documentation Rules

Every exhibit seized by security must bear an Evidence Tag and be accompanied by a Master Continuity Log. The documentation must record:

• Exhibit Identifier Number: Unique alphanumeric code (e.g., AST-2026-0723-01).
• Description: Exhaustive physical description including make, model, serial numbers, color, defects, and distinguishing marks.
• Seizure Details: Exact date, time (24-hr clock), and precise geographic location/coordinates where found.
• Seizing Officer: Printed name, security worker license number, and signature.
• Transfer History: Sequential record of every transfer containing the releasing party signature, receiving party signature, date, time, and specific purpose of transfer.

Practical Field Scenario: Emergency Evidence Seizure

Scenario: During a foot patrol of a shopping center parking structure in Surrey, BC, an AST security officer observes a suspect drop a brass-handled folding knife and a plastic bag containing white powder while fleeing from a broken vehicle window. A sudden torrential rainstorm begins, with runoff water flowing directly toward the discarded items.

Step-by-Step Execution:

1. Assessment & Photography: Recognizing imminent destruction from rainwater, the officer takes two quick photographs of the items showing their position relative to the damaged vehicle.
2. Personal Protective Equipment (PPE): The officer puts on thick nitrile gloves and a mask to protect against potential fentanyl toxicity and prevent DNA cross-contamination.
3. Seizure & Packaging: The officer picks up the knife by the outer edges of the brass handle and places it into a rigid plastic tube container. The officer carefully lifts the plastic bag of powder by its top edge and places it inside a tamper-evident evidence bag, sealing it securely.
4. Immediate Documentation: In their professional notebook, the officer records the exact time (14:10 hrs), weather conditions, photo file numbers, and the precise emergency justification for collection.
5. Secure Storage & Transfer: The officer transports the packaged items directly to the site's access-controlled evidence safe. When RCMP constables arrive at 14:45 hrs, the officer completes a formal handover: both the officer and the receiving constable sign the evidence tag and continuity log, documenting the exact transfer time.