2.3 Types of Evidence, Chain of Custody & Testifying in Court

Types of Evidence, Chain of Custody & Testifying in Court

A security guard's responsibilities do not end when an incident is stabilized or an offender is handed over to police. The ultimate legal resolution of a criminal offence, trespass prosecution, or civil lawsuit depends heavily on the quality, integrity, and admissibility of the evidence collected at the scene. Furthermore, security guards are frequently subpoenaed to deliver sworn testimony as professional witnesses in the Ontario Court of Justice, Superior Court of Justice, or Provincial Offences Court.

---

Categories of Evidence in Canadian Jurisprudence

Evidence comprises any testimony, document, digital record, or tangible object presented in a court of law to establish or refute an alleged fact in issue. Under Canadian evidentiary law, evidence is classified into four primary categories:

1. Direct Evidence

Direct evidence proves a material fact in issue directly, without requiring the trier of fact (judge or jury) to draw an inference or make a logical presumption:

• Eyewitness Observation: A security guard directly observing a suspect shatter a display case with a crowbar, conceal jewelry in their jacket, and run toward the exit.
• Firsthand Witness Testimony: A witness testifying in court: "I stood two meters away and observed the accused strike the victim in the face with a closed fist."
• Surveillance Video: Clear, unedited, time-stamped closed-circuit television (CCTV) footage depicting the perpetrator committing the physical act.

2. Circumstantial Evidence

Circumstantial evidence (also known as indirect evidence) does not prove the material fact directly, but establishes one or more secondary facts from which the main fact can be logically and reasonably inferred:

• Scenario: A security guard hears the sound of shattering glass in an office corridor. Upon arriving seconds later, the guard discovers an open, rummaged file cabinet, a broken window, and observes an individual sprinting away down an emergency staircase clutching a prybar and an envelope of cash.
• Evidentiary Weight: While the guard did not directly see the suspect force open the cabinet, the cumulative chain of circumstantial facts allows the court to infer that the suspect committed the break-in. In Canadian law, circumstantial evidence is fully capable of supporting a criminal conviction beyond a reasonable doubt if it is consistent with guilt and inconsistent with any other rational conclusion (R. v. Villaroman [2016]).

3. Physical (Real) Evidence

Physical or real evidence consists of tangible material objects associated with an incident, crime, or physical altercation:

• Weapons & Tools: Knives, firearms, brass knuckles, screwdrivers, prybars, or bolt cutters.
• Property: Stolen retail merchandise, recovered electronic devices, currency, or company equipment.
• Forensic & Biological Traces: Blood droplets, bodily fluids, latent fingerprints, shoe sole impressions, hair samples, tool marks, and textile fibers.
• Apparel: Discarded hoodies, gloves, or torn fabric left at points of entry.

4. Documentary and Digital Evidence

Documentary evidence encompasses written, printed, or electronically stored data introduced to prove the contents of the record:

• Security Field Notebooks: The guard's original, handwritten, contemporaneous daily notes.
• Daily Occurrence Logs (DOL): Routine shift records documenting patrols, access events, and facility conditions.
• Incident Reports: Formal, structured investigative reports completed immediately following critical occurrences.
• Electronic Records: Electronic access control badge swipe logs, keycard transaction histories, visitor sign-in registers, fire alarm panel electronic logs, and computer server access histories.

---

The Hearsay Rule and Common Legal Exceptions

One of the most foundational principles of evidence law in Canada is the Rule Against Hearsay.

The Principle of the Hearsay Rule

Hearsay is an out-of-court statement offered by a witness to prove the truth of the statement's contents. For example, if a security guard testifies: "A customer told me that the man in the blue jacket stole the laptop," the guard's statement is hearsay if offered to prove that the man in the blue jacket actually stole the laptop.

• Why Hearsay is Excluded: Hearsay evidence is inherently suspect and generally inadmissible because:
  1. The person who originally made the statement was not under oath when speaking.
  2. The judge and jury cannot observe the original speaker's demeanor or assess their credibility.
  3. The opposing party cannot cross-examine the original declarant on the witness stand to test their perception, memory, or truthfulness.

Recognized Exceptions Relevant to Security Operations

Canadian courts recognize narrow, established exceptions to the hearsay rule where the circumstances provide circumstantial guarantees of trustworthiness and necessity:

• Spontaneous Utterances (Res Gestae / Excited Utterance): An out-of-court statement made under the immediate emotional stress, shock, or excitement of a startling event, before the declarant had the opportunity to fabricate an untruth. Example: A bleeding victim running toward a guard shouting, "Help, the man in the leather jacket just stabbed me with a switchblade!"
• Dying Declarations: A statement made by a dying victim who possesses a settled, hopeless expectation of imminent death concerning the cause or circumstances of their impending demise.
• Admissions and Confessions (Statements Against Interest): Voluntary statements made by an accused individual admitting guilt or confessing to an element of the offence. In security encounters, if a detained shoplifter spontaneously volunteers, "I took the watch because I needed drug money," the guard can testify to that admission, provided the statement was completely voluntary and not induced by threats or promises of leniency.
• Business Records Exception: Records created in the usual and ordinary course of business by individuals under a duty to record them (e.g., electronic access control system logs, maintenance logs, security daily occurrence logs). Under Section 30 of the Canada Evidence Act and Section 35 of the Ontario Evidence Act, these records are admissible to prove the occurrence of recorded transactions.

---

Crime Scene Preservation and Contamination Protocols

When a serious criminal incident (such as an assault, robbery, homicide, or major break-and-enter) occurs on a secured property, the security guard on scene plays a pivotal role in protecting physical evidence until specialized police forensic units arrive.

Life Safety vs. Evidence Preservation

The foundational doctrine of emergency management dictates: Life safety always takes precedence over evidence preservation.

• If an individual is bleeding profusely, unresponsive, or experiencing cardiac arrest, the security guard must immediately administer first aid and summon emergency medical services (EMS).
• Paramedics and medical responders must not be denied access to a patient out of concern for preserving footprints or physical evidence.
• However, while rendering aid, the guard should minimize unnecessary disturbance to the surrounding physical environment.

Establishing Perimeters and Physical Barriers

Once life safety is secured and suspects are neutralized or have fled, the guard must immediately isolate the scene:

• Perimeter Size Rule: Always establish a perimeter that is larger than necessary. It is simple to reduce the size of a perimeter later, but impossible to recover physical evidence that has been kicked, trampled, or pocketed after a perimeter was drawn too narrowly.
• Physical Barriers: Utilize high-visibility barrier tape ("Caution" / "Do Not Cross"), stanchions, locked exterior doors, cones, or stationed security officers to seal off the boundary.

Controlling Access: The Crime Scene Entry/Exit Log

To safeguard evidentiary integrity, the guard must establish a single designated entry/exit point and maintain a formal Crime Scene Entry/Exit Log.

Every person attempting to cross the perimeter boundary must be recorded with:

1. Full legal name and employee/badge number.
2. Agency, department, or company (e.g., Toronto Police Service, Toronto Fire Services, Paramedic Services).
3. Exact time of entry and exact time of exit.
4. Specific operational purpose for entering the scene.
5. Any items brought into or removed from the scene.

Note: Unauthorized personnel—including property managers, corporate executives, clients, off-duty coworkers, and journalists—must be strictly barred from entering the perimeter.

Preventing Physical, Environmental, and Biological Contamination

• In Situ Preservation: Physical evidence must remain in situ (in its original position and condition). Do not touch, move, pick up, or manipulate weapons, shell casings, discarded tools, or bloodstained garments.
• Environmental Protection: If evidence is exposed to outdoor weather conditions (e.g., footwear impressions or blood droplets threatened by torrential rain or heavy snow), the guard should carefully place an elevated, clean, non-shedding container (such as a clean cardboard box) over the evidence without touching it, documenting the action in field notes.
• Avoiding Contamination: Guards must never smoke, eat, drink, chew gum, or discard trash within the crime scene boundary. Doing so deposits foreign DNA and trace contaminants that confound forensic analysis.

---

Chain of Custody: Documentation and Integrity

The Chain of Custody is the continuous, unbroken chronological record accounting for the custody, transfer, analysis, and disposition of physical evidence from the moment of discovery to its final presentation in court.

If defense counsel can establish a temporal gap or administrative deficiency where evidence was left unsecured, unmonitored, or accessible to unauthorized personnel, the court may rule that the evidence was contaminated or tampered with, excluding it entirely.

The Critical Elements of an Evidence Tag

Every physical item secured by a security guard must bear an evidence tag detailing:

• Date and exact time of recovery (e.g., 2026-09-09 at 22:45 hrs).
• Exact location recovered (e.g., Floor 3, North Stairwell landing, 50 cm from exterior door).
• Comprehensive description of item (make, model, color, serial number, physical condition).
• Name, licence number, and signature of the recovering security guard.
• Occurrence or Incident File Number matching the official incident report.

Tamper-Evident Packaging Standards

• Never store damp or biological evidence (such as bloody clothing) in sealed plastic bags; plastic retains moisture, generating mold and bacterial growth that destroys biological DNA. Use clean, porous paper bags.
• Seal containers using tamper-evident evidence tape. The recovering guard must sign or initial and date across the boundary between the tape and the container, ensuring that any opening attempts tear the signature and reveal tampering.

---

Courtroom Preparation, Procedure, and Demeanor

When subpoenaed to testify, a security guard acts as an objective witness of fact, not as an advocate for the prosecution, the employer, or the property owner.

Contemporaneous Notes and Refreshing Memory with Court Leave

A security guard's field notebook is their most critical professional asset in court. Because trials routinely occur months or years after an incident, witnesses cannot be expected to recall fine details from memory.

• Contemporaneous Standard: To be utilized in court, field notes must be contemporaneous—recorded while the events were unfolding or as soon as practically possible while the incident was completely fresh in the guard's memory.
• Originality: The guard must bring the original field notebook to court, not a summarized transcription, photocopied sheet, or retyped document.
• Leave of the Court: A witness does not possess an automatic right to open their notebook on the stand. When memory falters, the witness must request permission through the Crown Attorney: "Your Honour, may I refer to my original contemporaneous field notes to refresh my memory?" The trial judge must grant leave before the notebook can be opened.

Swearing an Oath vs. Making a Solemn Affirmation

Before delivering testimony, every witness must take a binding pledge to tell the truth:

• Swearing an Oath: A religious witness places their hand on a sacred religious text (such as the Holy Bible, Quran, or Torah) and swears to speak the truth.
• Solemn Affirmation: A non-religious or secular witness makes a formal, legally binding solemn affirmation to tell the truth.
• Legal Status: Both an oath and a solemn affirmation possess identical legal standing. Intentionally providing false testimony under either constitutes the serious indictable crime of Perjury (Section 131 of the Criminal Code), carrying maximum penalties of up to fourteen years in prison.

Direct Examination vs. Cross-Examination

Professional Demeanor on the Witness Stand

1. Punctuality & Appearance: Arrive well before the court session commences. Wear a clean, pressed, professional security uniform (if permitted by policy) or formal business attire (suit or jacket).
2. Addressing the Court: Address a provincial court judge or superior court judge as "Your Honour". When appearing before a Justice of the Peace in Provincial Offences Court, address them as "Your Worship".
3. Factual Neutrality: Deliver objective, unbiased facts. Avoid emotional language, personal theories, speculation, or expressing opinions regarding the guilt or innocence of the accused.
4. Handling Ambiguity: If opposing counsel asks a question to which you do not know the answer, state clearly: "I do not know" or "I do not recall." Never guess, assume, or fabricate answers under oath.