16.2 Termination, Documentation, and Evidence Preservation
Key Takeaways
- NFPA 470 (2022) JPR 11.6.1 is terminate: assist with scheduled debriefings and critiques, and report and document incident operations; OSHA 1910.120(q)(6)(iii)(H) is understand termination procedures.
- After emergency operations terminate, OSHA 1910.120(q)(3)(ix) requires the individual in charge of the ICS to implement appropriate decontamination — termination is not “everyone go home.”
- Debrief is the on-scene operational huddle (exposures, remaining hazards, dirty equipment); critique is later, multi-agency, and matches the OSHA 1910.120(q)(2)(x) ERP element “critique of response and follow-up.”
- Reportable-quantity releases go to the National Response Center (800-424-8802) and, as applicable, the SERC and LEPC; do not invent RQ tables — look up 40 CFR 302.4 / EPA List of Lists.
- Technicians may preserve or collect evidence when assigned, but law enforcement leads crime scenes and chain of custody; do not wash away a suspected intentional release without documenting, and do not return to service until decon, medical, and documentation are done.
16.2 Termination, Documentation, and Evidence Preservation
Quick Answer: NFPA 470 (2022) JPR 11.6.1 is terminate a hazardous materials/WMD incident: assist with scheduled debriefings and critiques, and report and document operations. OSHA 1910.120(q)(6)(iii)(H) (eCFR current through 2026-08-19) is understand termination procedures. After emergency operations have terminated, 1910.120(q)(3)(ix) requires the individual in charge of the ICS to implement appropriate decontamination procedures. Termination is not “everyone go home.” IAFF APIE-T puts this letter at Terminate — after Evaluate, not instead of it.
If 16.1 asked “is the leak actually stopped?”, this section asks “have we decontaminated, debriefed, documented, notified, and handed remaining hazards off?” Skipping that package is how a patched valve becomes a second incident in the ambulance, the evidence locker, or next Tuesday’s medical clinic.
Termination is a phase, not a radio word
11.6.1 given: the incident, an assignment, policies and procedures, operational observations, and approved forms. The technician outcome is assistance in debriefings and critiques plus reports and documentation. Transfer of command, when it happens, is an Incident Commander JPR (Chapter 13 / 13.6.1), not a technician self-promotion. You help close the emergency phase. You do not declare the highway open because you are tired.
OSHA’s definition of post emergency response (1910.120(a)(3)) is the work after the immediate threat is stabilized or eliminated and cleanup has begun. (q)(11) then sends that cleanup to paragraphs (b) through (o) — site-worker HAZWOPER — unless it is plant employees on plant property meeting the narrower (q)(11)(ii) training path. Emergency-response technicians who were part of the initial response and keep working the same incident are still in the emergency; a separate cleanup contractor the next morning is not. Do not call a Superfund excavation “still in (q)” because your team patched the tank yesterday.
OSHA’s post-operations decontamination duty
(q)(3)(ix) is one sentence academies under-teach: after emergency operations have terminated, the individual in charge of the ICS shall implement appropriate decontamination procedures. That is the IC’s duty. It is not a ban on decon during the event — Chapters 7 and 8 already required a corridor before entry. It is a ban on walking away with dirty tools, dirty CPC, and a dirty engine because “the leak is fixed.”
Decon at termination includes people and equipment (OSHA’s definition: remove hazardous substances from employees and their equipment). Chapter 8.2 covered equipment and runoff. At closeout, that means: corridor stays up until the last dirty item is processed; runoff is still a product; tools do not ride in a medic cab; CPC is not stuffed in a gear bag for the station washer without a plan. Return to service is last, not first.
Debrief versus critique — they are not synonyms
TEEX lists incident debrief and critique as separate technician topics under terminating the incident. Written items punish people who mash them together.
| Event | When | Who | Purpose |
|---|---|---|---|
| Debrief | On-scene or as soon as practical after operations, before people scatter | Assigned responders, often by the Hazmat Group Supervisor or IC | Operational: what product it was, who was exposed and for how long, what equipment is still dirty, what hazards remain, injuries or symptoms, immediate safety issues |
| Critique | Later, scheduled, often multi-agency | Responders plus outside agencies as the ERP requires | Improvement: what the plan should change; matches OSHA 1910.120(q)(2)(x) critique of response and follow-up |
| Post-incident analysis (when the AHJ uses the term) | After the critique inputs exist | Planning / the employer | Written reconstruction for records, training, and legal hold |
Debrief is how you catch the technician who is already wheezing, the chlorine-kit wrench that never went through the corridor, and the facility operator who still thinks the valve is closed. It is not the place to litigate whose radio procedure was rude. Critique is how the emergency response plan gets better. OSHA requires that critique element in the ERP; it does not require that the critique happen in the parking lot at 03:00 with people still in wet CPC. A blame session is neither.
Technician 11.6.1 requisite knowledge is the purpose, regulatory issues, elements, and procedures for debriefings and critiques, plus documentation and filing and maintenance requirements. You must be able to participate and complete approved forms. You are not required to chair a multi-agency after-action by virtue of a Chapter 11 certificate.
Medical surveillance and exposure reports
Termination medical is not the same sentence as termination of employment.
- Incident follow-up: OSHA 1910.120(q)(9)(ii) — any emergency-response employee who exhibits signs or symptoms that may have resulted from exposure, immediately or subsequently, gets medical consultation as in (f)(3)(ii) (as soon as possible after the incident or symptom onset, plus follow-up if the physician says so). (q)(9)(i) already put organized HAZMAT team members in the (f) surveillance program.
- Employment/reassignment exam: (f)(3)(i)(C) is a termination of employment or reassignment physical if there was no exam in the last six months. That is a career clock, not the radio word “terminate the incident.”
Document who was in the hot zone, entry and exit times, PPE worn, product, whether decon surveyed clean, and symptoms. That package is how occupational medicine reconstructs dose. A handshake at the bumper is not an exposure report. If exposure is suspected, do not wait for a dramatic collapse — (f)(3)(ii) is triggered by signs, symptoms, injury, or exposure above PELs/published levels without necessary PPE, not only by a hospital admission.
Notifications: NRC, SERC, LEPC — no invented RQ table
Responders are not the usual legal “person in charge of the facility,” but technician tests still expect you to know that notifications exist and where they go.
- National Response Center (NRC): 1-800-424-8802, 24-hour. CERCLA release reporting (40 CFR 302.6) requires immediate notice to the NRC when a CERCLA hazardous substance is released at or above its reportable quantity (RQ) in a 24-hour period. Do not invent RQ numbers. Look them up in 40 CFR 302.4 or EPA’s List of Lists for the substance you actually have.
- EPCRA section 304: facility releases of an extremely hazardous substance or CERCLA hazardous substance at or above the RQ also require immediate notice to the State Emergency Response Commission (SERC) (or Tribal ERC) and the Local Emergency Planning Committee (LEPC) (or Tribal EPC), with a follow-up written notice as soon as practicable (40 CFR 355). Transportation and transportation-related storage have special EPCRA rules — do not treat every highway leak as a facility 304 call, and do not skip DOT 49 CFR 171.15 immediate NRC notice when a transportation incident meets those criteria (death, injury requiring hospitalization, evacuation, and the other listed triggers).
- The facility owner/operator or the person in physical possession during transportation typically owns the statutory duty. The IC still confirms it happened, documents the NRC report number when one is issued, and does not assume “the plant probably called.”
If the exam stem does not give an RQ, do not pick a memorized pound figure. Pick notify the NRC / SERC / LEPC as applicable after looking up the RQ.
Documentation is the JPR, not homework
11.6.1 requisite knowledge includes approved forms, supporting documentation, and filing and maintenance. TEEX lists reports and documentation beside debrief and critique. Typical technician package — use what the AHJ actually files; recognize these names:
| Record | Why it exists |
|---|---|
| ICS 208 HM Site Safety and Control Plan | Zones, PPE, monitoring, decon, organization — the plan you evaluated against |
| ICS 214 Activity Log / unit logs | Who did what, when |
| ICS 201 / 202 / 204 as used | Briefing, objectives, assignments |
| Monitoring records | Instrument, lamp/sensor, location, time, readings — the trend from 16.1 |
| Entry / exit / air times | Heat, dose, and SCBA reconstruction |
| Photographs / video | Container damage, control tactics, evidence before it is moved or washed |
| SDS and shipping-paper copies | Identity you actually used, not memory |
| Exposure / medical reports | (q)(9) and (f) trail |
| NRC / SERC / LEPC notice | Report number, time, who called |
Medical records that sit in the (f) file follow 29 CFR 1910.1020 retention. Operational forms follow the employer/AHJ schedule. Losing the only copy of the monitoring log because it was on a wet clipboard is a 11.6.1 failure.
Evidence preservation — assigned work, law-enforcement lead
NFPA 470 Chapter 9.5 is the operations mission-specific JPR block for evidence preservation and public safety sampling (competency twin in Chapter 8.5). Operations personnel do that work when assigned, under a technician, an allied professional, or SOPs. Technicians may collect or preserve when the IC assigns it. That assignment does not make the technician the detective.
Rules that survive every academy:
- Law enforcement leads on crime scenes, including suspected intentional releases, illicit labs, and WMD. Federal Bureau of Investigation (FBI) interest is expected on WMD. You isolate and preserve; you do not “process the scene” because you own the PID.
- Chain of custody is the documented possession of each sample or item from collection to the lab. Break it and the exhibit may be useless in court.
- Photograph and describe before you move or wash. Decon and product control still protect life — they are not an excuse to undocument a suspected crime. If you must flush to save a victim, note what you washed, where runoff went, and what the scene looked like first.
- Do not wash away evidence of a suspected intentional release without documenting. A bleach wash that destroys a residue can also destroy the case. Coordinate with the law-enforcement IC in Unified Command.
- Secondary devices (Chapter 14.2) still exist at termination. “The leak is patched” is not a search of the scene.
- Public-safety sampling is not scoop-and-sniff. Packaging, labeling, and decontaminating the outside of the evidence container are part of the skill, not extras.
Return to service only when the checklist is actually done
Equipment rehab is inspection, decontamination, and restock — not a siren back to quarters. CPC that is degraded, SCBA that was used, and meters that sat in product are out of service until cleaned, function-checked, and documented. People go through medical/rehab, not past it. The corridor comes down after the last dirty item, not when the news camera leaves.
Termination checklist (technician view)
| Step | Done when |
|---|---|
| Evaluate complete | 11.5.1: objectives met or a documented decision that remaining work is post-emergency cleanup, not emergency control |
| People decontaminated | Corridor surveyed; no dirty personnel in the cold zone (8.3) |
| Equipment decontaminated / isolated | Tools, hose, meters, stretchers, apparatus running boards processed or bagged as still dirty |
| IC implements (q)(3)(ix) decon | Not assumed because “we already had a corridor” |
| On-scene debrief | Product, exposures, remaining hazards, dirty gear, injuries — before crews scatter |
| Medical | Symptomatic or suspected exposures referred under (q)(9)(ii); entry team through rehab |
| Notifications | NRC / SERC / LEPC / DOT as applicable; report numbers logged — no invented RQ |
| Documentation | 208 HM, logs, monitoring, photos, SDS/shipping papers, entry times filed per AHJ |
| Evidence | Photographed; chain of custody if sampled; law enforcement has the crime scene |
| Remaining hazards transferred | Facility, cleanup contractor under (q)(11), or law enforcement owns what is left |
| Critique scheduled | Not skipped; OSHA (q)(2)(x) lives in the ERP |
| Return to service | Only after decon, medical, restock, and records — not when the leak first went quiet |
Scenario: patched valve, dirty wrench, suspected intentional dump
A pesticide tote was found cut, not failed. Entry kits a leaking valve on a second container, surveys a shrinking cloud, and reports improving conditions (16.1). The IC is ready to terminate emergency operations. The technician who pockets the dirty control wrench “to clean at the station,” skips the debrief because the shift is over, and pressure-washes the cut tote “so the parking lot looks professional” has failed 11.6.1 three ways: (q)(3)(ix) decon of equipment, no exposure/remaining-hazard debrief, and destruction of evidence on a suspected intentional release without documentation or law-enforcement lead. The correct close: keep the corridor up; decon people and tools; photograph the cut before any wash; hand the crime scene to law enforcement in Unified Command; log entry times and monitoring; confirm whether an RQ / transportation NRC call is required from the list, not from memory; send anyone with symptoms to medical; schedule the critique; then consider the apparatus in service.
If you remember one sentence: termination is decon plus debrief plus documents plus notifications plus evidence discipline — not a radio goodbye.
Which statement correctly describes terminating a hazardous materials incident for a technician under NFPA 470 (2022) 11.6.1 and OSHA 1910.120?
How do an on-scene debrief and a critique differ at a technician-level hazmat incident?
A tote appears cut, not failed, and a reportable-quantity release may have occurred. Which termination actions are correct?
You've completed this section
Continue exploring other exams