6.1 Evidence Preservation & Chain of Custody

Key Takeaways

  • Physical evidence collected at a fire scene must be documented, collected, packaged, and tracked in accordance with NFPA 921 Chapter 17 and NFPA 1033 Professional Qualifications.
  • The chain of custody is an unbroken, legally defensible chronological record detailing every individual who held, transferred, analyzed, or stored a piece of physical evidence from scene discovery to court presentation.
  • Scene contamination must be actively mitigated by establishing secure perimeters, using clean single-use nitrile gloves changed between each sample, and using decontaminated tools.
  • Comprehensive evidence logs must record exact spatial origin (3D coordinates or grid placement), date, time, collector identity, photo identification numbers, and packaging details.
  • Storage environments must be secured against unauthorized access, physical tampering, temperature extremes, and cross-contamination from adjacent volatile storage.
Last updated: July 2026

6.1 Evidence Preservation & Chain of Custody

Introduction to Physical Evidence in Fire Investigation

Physical evidence is a critical component of origin and cause determination, criminal arson prosecution, and civil subrogation litigation. Under NFPA 921 (Guide for Fire and Explosion Investigations, Chapter 17) and NFPA 1033 (Standard for Professional Qualifications for Fire Investigator), a fire investigator must possess requisite knowledge regarding the identification, collection, preservation, and documentation of physical evidence. Physical evidence includes tangible objects recovered from a fire scene—such as fire debris containing ignitable liquid residues (ILRs), failed electrical arc artifacts, appliances, gas piping, and structural materials.

In legal proceedings, physical evidence serves to corroborate or refute hypotheses derived through the scientific method. Unlike testimonial evidence, physical evidence is objective; however, its legal admissibility and probative value depend entirely upon the investigator's ability to demonstrate that the evidence has not been altered, contaminated, degraded, or spoliated from the time of recovery to its presentation in court.

+-----------------------------------------------------------------------------------+
|                             TYPES OF FIRE SCENE EVIDENCE                          |
+-----------------------+-----------------------+-----------------------------------+ 
| Physical (Real)       | Demonstrative         | Documentary                       |
| Tangible items from   | Models, 3D scans,     | Written reports, photo logs,      |
| scene (debris, wire)  | diagrams, mockups     | dispatch records, chain logs      |
+-----------------------+-----------------------+-----------------------------------+

Scene Security and Perimeter Control

Preservation begins long before physical objects are bagged or boxed. Securing the fire scene is the initial phase of evidence preservation. NFPA 921 mandates that access to the fire scene must be controlled immediately upon the arrival of investigative personnel to prevent evidence destruction, theft, or cross-contamination.

Establishing Perimeters

  1. Outer Perimeter: Established well beyond the visible area of structural damage or debris scattering. For structural fires, the outer perimeter should extend at least 20 to 30 feet beyond the building exterior or broken windows. In explosion investigations, NFPA 921 recommends setting the outer perimeter at 1.5 times the distance to the farthest piece of blast debris found.
  2. Inner Perimeter: Surrounds the focal point of the scene—specifically the area of origin, burn patterns of interest, or suspected point of ignition. Only essential investigative personnel trained in evidence preservation are permitted within the inner perimeter.
  3. Access Control Log: A designated scene officer must maintain an entry/exit log recording the full name, agency, date, time in, time out, and purpose of every individual entering the scene. Unauthorized entry by bystanders, media, or non-essential emergency personnel invalidates scene integrity and invites cross-contamination arguments during cross-examination.

Cross-Contamination Mechanisms & Prevention Protocols

Cross-contamination is the accidental transfer of foreign substances—particularly hydrocarbons, synthetic polymers, or chemical residues—onto physical evidence. In ignitable liquid testing, even trace contamination measured in parts per million (ppm) can lead to false-positive laboratory identifications or invalidate legitimate samples.

Contamination MechanismDescriptionPrevention Protocol
Tread / Footwear TransferFootwear carrying fuel residues from turnouts, gas stations, or previous scenes.Wear clean, disposable Tyvek boot covers before entering the inner perimeter; change covers between sample sites.
Tool ContaminationUsing shovels, trowels, or shears carrying residues from prior excavations.Decontaminate tools using deionized water and acetone/methanol rinses, followed by clean air drying; use disposable single-use sampling tools when available.
PPE / Glove TransferReusing turnout gloves or nitrile gloves across multiple sampling locations.Wear clean, powder-free nitrile gloves; discard and replace gloves between collecting every individual sample item.
Vapor Phase TransportHydrocarbon vapors permeating porous packaging materials (e.g., polyethylene).Package volatile evidence exclusively in unlined metal paint cans, glass jars, or specialized gas-tight nylon (Kapak) bags.
Exhaust DepositionGas-powered equipment (generators, saws, pumps) emitting unburned hydrocarbons near debris.Position power generators downwind; prohibit gasoline-powered tools near suspected origin zones prior to evidence sampling.

Evidence Documentation Protocols

Under NFPA 1033 Section 4.4, investigators must document the scene and evidence location using written notes, detailed logs, spatial diagrams, and photography before any evidence is disturbed or moved.

Photography & Spatial Mapping

  • Pre-Collection Photography: Every evidence item must be photographed in situ (in its original position) following a four-step progression: overall scene context, medium-range location within the compartment, close-up view showing item features, and close-up view incorporating an approved photomacrography scale (e.g., ABFO No. 2 scale) and direction indicator.
  • Spatial Coordinates: The location of each evidence item must be fixed using standard spatial surveying methods: triangulation from fixed architectural reference points, baseline-offset measurement, or high-definition 3D laser scanning. Coordinates must be recorded in the master evidence log.
  • Evidence Tagging: A rigid evidence tag must be attached to the primary container immediately upon recovery. The tag must include: unique Evidence Tracking Number (e.g., EV-20260722-01), case number, date and time of recovery, exact geographic/spatial origin, item description, name and agency of collector, and initial storage location.

Constructing and Maintaining the Chain of Custody

The chain of custody is a formal legal log documenting the continuous possession, transfer, and disposition of physical evidence. Under Federal Rules of Evidence (FRE Rule 901), evidence must be authenticated by showing that it is what the proponent claims it to be. A break in the chain of custody creates a legal presumption of tampering, substitution, or contamination, frequently leading to judicial exclusion of the evidence.

Essential Components of a Chain of Custody Log

  1. Item Identifier & Description: Unique ID matching the evidence tag and photo log.
  2. Date and Time of Transfer: Exact timestamp when custody changed hands.
  3. Relinquishing Party: Full signature, printed name, title, and organization of the person surrendering custody.
  4. Receiving Party: Full signature, printed name, title, and organization of the person accepting custody.
  5. Purpose of Transfer: Specific reason for transfer (e.g., "Transport to Forensic Lab for ASTM E1618 Analysis," "Evidence Locker Storage," or "Courtroom Exhibit Presentation").
  6. Location & Condition: Current physical storage facility address and container seal integrity status.

Evidence Storage Vault & Security Requirements

Once collected, physical evidence must be maintained in a dedicated, secure storage vault to guarantee integrity until litigation is fully resolved or destruction is legally authorized.

  • Access Control: Storage facilities must feature multi-factor security, keycard access logs, or dual-custody lock systems. Only designated evidence custodians are granted access.
  • Environmental Isolation: Volatile fire debris samples must be stored away from petroleum storage areas, fuel dispensaries, vehicle bays, or paint booths to prevent ambient vapor permeation. Storage areas should be climate-controlled (temperature maintained below 20°C / 68°F) to minimize hydrocarbon volatility and prevent microbial degradation of soil evidence.
  • Tamper-Evident Packaging Seals: All evidence containers must be sealed with tamper-evident tape applied across container openings. The collector or custodian must initial and date across the edge of the tape, such that any unauthorized opening will tear the tape and distort the signature.
Loading diagram...
Evidence Chain of Custody & Field-to-Courtroom Workflow
Test Your Knowledge

What is the primary legal purpose of maintaining an unbroken chain of custody for physical evidence recovered from a fire scene?

A
B
C
D
Test Your Knowledge

An investigator is collecting multiple fire debris samples across different rooms at a suspected arson scene. Which protocol is mandatory under NFPA 921 to prevent cross-contamination between sample sites?

A
B
C
D
Test Your Knowledge

During trial cross-examination, defense counsel identifies that a transfer signature is missing on the evidence log between the field investigator and the lab courier. What is the most likely judicial impact of this break in custody?

A
B
C
D
Test Your Knowledge

According to NFPA 921 recommendations, how should an investigator set the outer security perimeter at an explosion investigation scene?

A
B
C
D