6.1 Field Note-Taking Standards, Daily Occurrence Logs & Memory Aids
Key Takeaways
- A security guard's field notebook is an official, discoverable legal document admissible as evidence in criminal, civil, and regulatory proceedings under the Canada Evidence Act and Ontario Evidence Act.
- Notebooks must be permanently bound with pre-numbered pages in indelible black or blue ink; loose-leaf binders, torn-out pages, and blank lines are prohibited because each destroys the record's evidentiary integrity.
- Errors are corrected only by drawing a single line through the mistake, writing the correct text, and adding initials and date—liquid paper, erasers, and scribbling are legally forbidden.
- Under the contemporaneous rule, entries must be made during the incident or as soon as practicable while recollections are fresh, as unexplained delays severely undermine witness credibility in court.
- A site runs distinct records for distinct purposes—field notebook, daily occurrence log, incident report, use of force report, hazard report, and witness statement—while life-safety emergencies go to 911 before any report is written.
Field Note-Taking Standards, Daily Occurrence Logs & Memory Aids
Core Principle: In Ontario private security, an on-duty field notebook is not a casual personal notepad—it is an official legal record. Under provincial and federal evidence rules, contemporaneous field notes constitute primary evidence that can make or break a prosecution, civil lawsuit, or regulatory inquiry.
The Legal Status of Security Notebooks
A licensed security guard's field notebook is an official document subject to disclosure and admission into evidence in Ontario courts under the Canada Evidence Act (R.S.C. 1985, c. C-5) for federal criminal matters and the Ontario Evidence Act (R.S.O. 1990, c. E.23) for provincial offences and civil proceedings.
When an incident occurs on a guarded site—whether an arrest, an assault, a slip-and-fall injury, or a break-and-enter—the security guard becomes a key factual witness. In subsequent legal proceedings, the guard's field notebook is fully discoverable under Rule 30 of the Ontario Rules of Civil Procedure and the criminal disclosure principles established by the Supreme Court of Canada in R. v. Stinchcombe (1991). A guard can be formally compelled to produce their notebook in court through a subpoena duces tecum (a court order commanding a witness to appear and bring specified physical documents).
While the physical notebook is typically issued by and remains the legal property of the security agency or property owner, the guard holds continuous physical custody and personal accountability for every entry made during their shifts. Notebooks must be retained in secure storage according to statutory limitation periods (typically at least two years under the Ontario Limitations Act, 2002, and longer for critical incidents, serious personal injury claims, or incidents involving minors).
Physical and Formatting Standards for Field Notebooks
To ensure evidentiary integrity and withstand intense judicial scrutiny, every Ontario security guard must adhere to strict physical and formatting rules:
1. Bound Format with Pre-Numbered Pages
- Bound Format: Notebooks must have sewn, glued, or permanently stitched bindings. Loose-leaf binders, spiral-bound notebooks, perforated tear-away pads, and folded sheets of scrap paper are strictly prohibited. Loose or perforated pages can be removed or inserted undetected, completely undermining the document's legal integrity in court.
- Numbered Pages: Every page must be consecutively numbered. If the manufacturer did not pre-number the pages, the guard must manually number every page in permanent ink from page 1 to the end before writing the first operational entry. This guarantees chronological continuity and proves that no pages were torn out or replaced.
2. Cover Identification Details
Before deployment, the guard must clearly document identification details on the inside front cover:
- Guard's full legal name and PSISA licence number;
- Security agency or employer name;
- Notebook sequence number (e.g., "Book 4 of 2026");
- Date notebook commenced (start date) and date concluded (end date);
- Agency contact information and return instructions if lost or mislaid.
3. Indelible Permanent Ink
Entries must be written exclusively in permanent black or blue non-erasable ballpoint or gel ink. Pencil, erasable ink pens, felt markers that bleed through pages, and colored inks (red, green, purple) are strictly forbidden. Permanent ink ensures that entries cannot be altered, faded, or erased over time.
4. Structure of Daily Entries
Every shift entry must follow a standardized opening format:
- Date: Full calendar date in standard format (e.g., "Wednesday, September 9, 2026");
- Location & Post: Specific site name, building address, and assigned post (e.g., "Metro Logistics Centre, Gatehouse 2");
- Shift Hours: Scheduled shift start and end times (e.g., "0700 hrs – 1900 hrs");
- Weather & Environmental Conditions: Temperature, lighting conditions (daylight, dusk, darkness, artificial floodlights), precipitation (heavy rain, freezing rain, clear, dense fog), and ground surface conditions (dry asphalt, icy sidewalk, wet tile). Environmental factors are frequently contested in slip-and-fall civil litigation and nighttime motor vehicle collisions;
- Duty Partner & Equipment Issued: Full names and licence numbers of partner guards, and equipment custody recorded (radio callsign, patrol wand, master keys, body-worn camera).
5. Timekeeping and Line Usage
- 24-Hour Military Time: All timestamps must be written in the left margin using 24-hour military time (0000 to 2359). Military time eliminates confusion between a.m. and p.m. (e.g., 0815 vs. 2015).
- No Blank Lines: Guards must write continuously on every line. Leaving blank lines between entries or at the bottom of pages creates space where fraudulent or retroactive entries could be inserted later.
- Diagonal Void Line (Z-Line): If empty lines remain at the end of an entry or at the conclusion of a shift before turning to the next page, the guard must draw a firm diagonal line (a diagonal slash or Z-line) across the unused area, sign, and date the line.
6. Prohibited Notebook Content
The notebook is an official public document that may be scrutinized by judges, juries, Crown prosecutors, and defence attorneys. It must NEVER contain:
- Personal reminders, grocery lists, personal phone numbers, or doodles;
- Emotional reactions, unprofessional slang, or sarcastic commentary;
- Subjective opinions, derogatory generalizations, or offensive humor;
- Confidential personal passwords or alarm bypass codes that compromise facility security if disclosed in open court.
Error Correction Protocol: The Single-Line Rule
Mistakes inevitably occur when writing notes during fast-moving, high-stress security incidents. How a guard corrects a mistake determines whether their testimony will be believed or dismissed by a court.
The Mandatory Correction Procedure
- Draw a single neat horizontal line through the incorrect word, number, or phrase.
- Ensure the original erroneous text remains fully legible beneath the line.
- Write the correct word or phrase immediately above or adjacent to the struck-through text.
- Place the guard's initials and the current date immediately beside the correction.
Absolute Prohibitions
- NO Correction Fluid or Tape: Liquid paper, white-out, and correction tape are strictly prohibited.
- NO Erasing: Pencil erasers, rubber erasers, or chemical ink eradicators are forbidden.
- NO Obliteration: Heavy scribbling, black markers, cross-hatching, or blacking out text is unacceptable.
- NO Page Removal: Tearing out, cutting, or removing pages—even blank or heavily stained ones—is an immediate evidentiary violation.
CORRECT: 5492 RC 2026-09-09
5429 [single strike through 5429, correct number 5492 written above with initials RC]
INCORRECT: [White-out liquid applied over error, or text completely blacked out with marker]
The Judicial Rationale
In court, opposing counsel will closely inspect the original notebook. If an entry is concealed with white-out or black ink, the court cannot determine what was originally written. Under the legal doctrine of adverse inference, the judge or jury may presume that the concealed text contradicted the guard's testimony or exposed misconduct. Conversely, a clean single-line strike demonstrates honesty, transparency, and procedural rigor.
The Contemporaneous Note-Taking Standard
The evidentiary value of a security guard's notebook relies fundamentally on the contemporaneous rule.
Definition and Legal Meaning
"Contemporaneous" means notes made at the exact time the event occurs, or as soon as practicable thereafter while the memory is fresh in the mind of the witness.
Human memory degrades swiftly following a traumatic or chaotic event. Courts place the highest probative value on notes recorded immediately because they reflect fresh, unvarnished recollections before external influences, conversations with colleagues, or retrospective rationalizations can taint memory.
Managing Delays in Note-Taking
During critical incidents—such as administering CPR, restraining an aggressive trespasser, or evacuating a burning facility—a guard cannot stop to write in a notebook. In such circumstances, the guard must:
- Complete all life-safety and emergency operational tasks first;
- Document the incident in their notebook at the earliest safe opportunity;
- Clearly record the actual time of entry alongside the actual time the event occurred, noting the legitimate reason for the delay.
Example Entry:
1630 hrs— Entry made regarding 1515 hrs physical restraint of trespasser at West Entrance. Note delayed due to continuous medical monitoring of individual, scene containment, and formal custody handover to Toronto Police Service (Constable Smith #4421).
Failing to explain a delay invites defence cross-examination arguing that the guard fabricated or altered details after conferring with management or other witnesses.
Prohibition on Collaborative Note-Taking
Each guard's notebook must reflect their own independent, honest sensory observations. Guards working the same incident must NEVER:
- Dictate notes to one another;
- Copy word-for-word from another guard's notebook;
- Harmonize or align conflicting recollections prior to writing notes.
While guards may discuss an event to ensure site safety, collaborative note-taking constitutes collusion, which destroys witness credibility and can lead to criminal perjury investigations.
Daily Occurrence Logs (DOL) vs. Field Notebooks
In professional security deployments, guards interact with two foundational log formats: the individual Field Notebook and the master Daily Occurrence Log (DOL) (also termed the Shift Activity Log or Daily Log).
| Feature / Dimension | Field Notebook | Daily Occurrence Log (DOL) | Incident Report (IR) |
|---|---|---|---|
| Primary Purpose | Personal contemporaneous legal record of an individual guard's observations and actions | Facility-wide master chronological record of all operational activity, access, and patrols during a shift | Detailed, standalone formal legal investigation document for specific unusual, criminal, or emergency events |
| Physical Custody | Kept in the individual guard's pocket; retained personally throughout the shift | Maintained at the central security desk or logged into facility management software | Submitted to client management, corporate risk teams, police, and insurance adjusters |
| Author | Single individual security guard | Maintained collaboratively by all on-duty control desk guards and patrol officers | Lead responding security guard, investigator, or supervisor |
| Typical Content | Detailed notes, specific suspect descriptions, verbatim statements, environmental data | Shift handovers, equipment custody sign-outs, routine patrol tours, visitor counts, contractor passes | Comprehensive 5W1H investigation narrative, evidence lists, witness statements, CYMBAL vehicle data |
| Time Format | 24-hour military time in left margin | 24-hour military time for every discrete entry | 24-hour military chronological narrative |
| Evidentiary Use | Primary memory refresh aid for the guard on the witness stand in court | Proves facility operational status, duty staffing, patrol round verification, and baseline activity | Primary exhibit in criminal trials, civil lawsuits, insurance claims, and inquests |
Core Components of a Professional Daily Occurrence Log
- Shift Handover & Staffing: Names and licence numbers of incoming and outgoing guards, verification of site keys, master access badges, radios, and emergency panic alarms.
- Equipment Custody Register: Sign-in and sign-out tracking for flashlights, patrol wands, mobile phones, body-worn cameras, and facility vehicles.
- Routine Patrol Tours: Timestamps and checkpoint locations for electronic tour wand scans or NFC tags across mechanical rooms, fire exits, and exterior perimeters.
- Access Control & Facility Activity: Deliveries received, contractors granted access, parking infractions issued, and doors unlocked or secured.
- Incident Cross-References: Concise one-line references to significant occurrences directing readers to full incident reports (e.g., "1410 hrs: Trespass incident at North Loading Dock. Individual escorted off site. See Incident Report #2026-088").
Evidentiary Rules and Court Testimony: Refreshing Memory
When a security guard is summoned to testify in the Ontario Court of Justice or Superior Court of Justice, months or years have often elapsed since the incident. Under Canadian law, two legal doctrines govern the use of notebooks in court:
1. Present Memory Revived (Refreshing Memory)
Under this common-law doctrine, a witness uses their contemporaneous notes on the witness stand to trigger their faded memory. The legal procedure is precise:
- The guard is asked a question by counsel and states that they cannot recall the specific detail (e.g., exact badge number or licence plate);
- Counsel requests permission from the presiding trial judge for the witness to consult their contemporaneous field notes;
- Once the judge grants permission, the guard inspects their notebook silently;
- The guard looks up from the notebook and testifies orally from their revived independent memory;
- The notebook itself does not become an exhibit; the guard's oral testimony is the evidence.
2. Past Recollection Recorded
If years have passed and the guard has zero independent recollection of the incident even after reading their notes, the notes may still be admitted into evidence under the doctrine of Past Recollection Recorded, provided four strict criteria are met:
- The notes were made contemporaneously with the event;
- The witness had personal knowledge of the facts at the time the notes were made;
- The witness states under oath that they have no present independent memory;
- The witness confirms that they had a habit or duty of recording facts accurately and that the notes were truthful when written.
Under this doctrine, the field notebook itself is tendered into evidence as a physical exhibit.
Surviving Defence Cross-Examination
Defence lawyers are trained to dissect security notebooks to impeach witness credibility. They look for:
- Inconsistent Ink Colors: Suggests notes were added or doctored later;
- Variations in Handwriting Style or Slant: Indicates stress, haste, or different authors;
- Missing Timestamps or Gaps: Allows counsel to argue events occurred differently;
- Torn Pages or Missing Numbers: Leads to devastating accusations of destroyed exculpatory evidence;
- Subjective Opinions: Used to argue that the guard was biased against the accused.
Maintaining meticulous, disciplined note-taking standards during every single shift protects the guard, their employer, and the administration of justice.
The Different Types and Purposes of Reports
Section 4 of the ministry syllabus requires guards to know the different types and purposes of reports and to identify the appropriate method of communication to report an issue. A site typically runs the following documents, and using the wrong one is itself a reporting failure:
| Report Type | Purpose | Typical Trigger |
|---|---|---|
| Field notebook | The guard's personal contemporaneous legal record | Every shift, continuously |
| Daily Occurrence Log (DOL) | Facility-wide chronological record of the shift | Every shift, continuously |
| Incident report | Full account of one specific event | Theft, assault, arrest, damage, medical event, trespass |
| Use of force report | Detailed justification of any physical intervention | Any hands-on contact, restraint, or handcuffing |
| Hazard / deficiency report | Notify the client of an unsafe or defective condition | Burnt-out lighting, ice, blocked exit, failed door hardware |
| Maintenance / work order request | Request a repair through the client's system | Non-urgent building faults |
| Lost and found report | Chain of custody for found property | Any item taken into the guard's possession |
| Vehicle / patrol log | Record of mobile patrol activity, mileage and checkpoints | Mobile and relief posts |
| Witness statement | A third party's own account in their own words | Any incident with independent witnesses (see Section 6.4) |
| Shift handover / pass-on log | Transfer of live issues to the incoming guard | End of every shift |
Choosing the method of communication is a separate judgement from choosing the document. Escalate by urgency: life safety goes to 911 first, then the client's emergency contact, then the supervisor; an in-progress crime goes over the radio to dispatch immediately and is written up afterward; a non-urgent deficiency goes into the log and the client's work-order system. Never let the writing of a report delay a call that protects life.
While conducting an access audit at a commercial office tower, a security guard discovers an error in their field notebook entry from thirty minutes prior, having recorded an incorrect badge number for a contractor. What is the legally required method for correcting this error in Ontario?
Two years after an arrest on a commercial property, a security guard is subpoenaed to testify for the Crown in the Ontario Court of Justice. When called to the witness stand, the guard realizes they cannot recall the precise verbal warnings given to the accused. What is the proper procedure for the guard to use their field notebook to assist their testimony?
At 0300 hours during a night shift at an industrial terminal, a security guard completes their exterior patrol round and has three blank lines remaining at the bottom of the page in their bound field notebook before the next hour's activities. According to standardized security note-taking protocols, what should the guard do with these blank lines?