10.3 Incident Scene Preservation and Evidence Gathering Protocols

Key Takeaways

  • Upon the occurrence of an incident, rescue and medical care take precedence; immediately afterwards the scene must be secured within a physical cordon to preserve the evidence.

  • Section 24(2) of the OHS Act forbids disturbing the scene of a fatal, likely-fatal or limb-loss incident without an inspector's consent, except to rescue persons, remove the injured or dead, or prevent a further incident.

  • Forensic evidence gathering follows the '4 P's' method: Physical evidence (scaled photography, debris mapping), Paper evidence (H&S file, appointments, inspection registers), People evidence (separate witness interviews), and Parts evidence (component isolation, chain of custody).

  • Witness interviews must begin promptly to limit memory decay and collusion, using separated witnesses, open questions and cognitive interviewing techniques.

  • Incident reconstruction combines the evidence into pre-contact, contact and post-contact phases to map the energy transfer, barrier failures and response actions.

Last updated: October 2026

1. Emergency Response & Securing the Incident Perimeter

When a catastrophic incident occurs on a construction site—such as a structural collapse, crane failure, or fall from height—the immediate response of the Construction Health and Safety Manager (CHSM) is dictated by the principle of hierarchical priority: preservation of human life takes precedence over all other considerations. Emergency medical services (EMS), certified site first aiders, and technical rescue teams must be mobilized immediately to extricate, triage, and stabilize injured persons. Concurrently, appointed personnel must isolate immediate secondary hazards, including isolating live electrical substations, closing pressurized gas mains, stabilizing precarious hanging formwork, and halting moving plant.

However, the instant that medical evacuation is underway, the CHSM's primary operational focus must transition immediately to incident scene preservation and perimeter containment. Physical evidence on a dynamic construction project is exceptionally fragile: it is subject to destruction by weather, contamination by panicked workers, intentional tampering by culpable supervisors, and spoliation by heavy earthmoving machinery.

The Two-Tier Exclusion Cordon

To preserve forensic integrity, the CHSM must establish a two-tier physical exclusion zone:

  1. Inner Cordon (Forensic Exclusion Zone): Encompasses the immediate impact zone, the resting positions of victims, the failed equipment/structure, and the full extent of the debris scatter field. This zone is marked with heavy-duty red-and-white warning barricade tape, rigid temporary mesh fencing, or structural hoardings. Zero entry is permitted into this inner cordon without the personal authorization of the Lead Investigator or DEL Inspector.
  2. Outer Cordon (Investigation Staging Zone): Encompasses an expanded buffer zone surrounding the inner cordon. It houses the incident command post, the staging area for statutory inspectors and emergency services, witness isolation rooms, and media control boundaries. Access is restricted to authorized project leadership, legal counsel, and statutory representatives.

Scene Sentry & Incident Access Log

The CHSM must assign dedicated security sentries at every access point into the cordon. A formal Incident Scene Entry Register (Access Log) must be maintained at the cordon gate. Every individual entering the scene—including DEL inspectors, SAPS forensic officers, company directors, and rescue personnel—must have their full name, organization, professional capacity, exact time of entry, exact time of exit, and specific reason for entry recorded in ink.

2. Legal Liabilities of Scene Disturbance under OHS Act Section 24(2)

In South African law, incident scene preservation is not merely an investigative best practice; it is a rigid statutory mandate backed by criminal sanctions. As examined in Section 10.1, Section 24(2) of the Occupational Health and Safety Act (Act 85 of 1993) strictly prohibits any person from disturbing the site, or removing any article or substance from the site, where a person died, was injured to such an extent that they are likely to die, or suffered the loss of a limb or part of a limb, without the consent of a Department of Employment and Labour (DEL) inspector.

Narrow Statutory Exceptions

The proviso to Section 24(2) allows only such action as is necessary for three purposes, and the inspector may not withhold consent unnecessarily:

  1. Rescuing Persons from Danger: When touching, moving, or altering machinery, falsework, or debris is necessary to extricate trapped victims or get people out of danger;
  2. Removing the Injured or Dead: Taking injured people to medical care and removing the body of a deceased person. In practice, where a death occurs, the South African Police Service and forensic pathology services attend and remove the body after recording its position, so the CHSM should notify them immediately;
  3. Preventing a Further Incident: When action is necessary to prevent another incident (e.g., bracing an unstable retaining wall threatening a neighbouring dwelling, isolating a live electrical supply, or venting an over-pressurized tank threatening an explosion).

Whenever emergency actions are taken under these exceptions, the CHSM must document the exact initial condition of the scene prior to disturbance using rapid photographs, video footage, and witness notes, detailing why the disturbance was unavoidable.

Legal Sanctions & Spoliation Consequences

Prematurely tidying up an incident scene, discarding ruptured slings, repairing broken scaffold couplers, or restarting plant to meet commercial schedules without an inspector's consent contravenes Section 24(2) and is an offence under Section 38(1) of the OHS Act, punishable by a fine of up to R50,000 and/or imprisonment for up to one year. Deliberately destroying or hiding evidence to frustrate a police or inspector's investigation may also amount to the common-law crime of defeating or obstructing the course of justice. Missing evidence also damages the employer's position in a Section 32 inquiry, a prosecution or a Section 56 increased-compensation application, because the employer can no longer show what actually failed.

3. The "4 P's" Evidence Gathering Methodology

Forensic accident investigation on complex construction sites requires a rigorous, structured methodology. The internationally recognized "4 P's" framework—Position/Physical, Paper, People, and Parts—provides a comprehensive taxonomy ensuring that no vital forensic stream is overlooked.

                    INCIDENT FORENSIC EVIDENCE COLLECTION
                                      │
       ┌──────────────────┬───────────┴───────────┬──────────────────┐
       ▼                  ▼                       ▼                  ▼
   PHYSICAL             PAPER                  PEOPLE              PARTS
• Scaled Photos      • H&S File             • Direct Witnesses  • Failed Components
• Laser Scans        • CR 8 Appointments    • Cognitive Intvw   • Rigging / Slings
• Debris Mapping     • Baseline / DSTI      • Prompt Separation • Chain of Custody
• Weather Logs       • Plant Registers      • Signed Statements • Lab / NDT Testing

1. Physical Evidence (Position & Environment)

Physical evidence captures the transient spatial and environmental reality of the incident scene before natural elements or human activity distort it:

  • Systematic Forensic Photography: High-resolution photography must be executed immediately, capturing the scene from three standard forensic perspectives:
    1. Establishing / Panoramic Shots: 360-degree wide-angle views capturing the entire site context, access roads, adjacent buildings, weather, and orientation;
    2. Medium / Contextual Shots: Establishing the spatial relationship between the victim, the machinery, temporary works, guardrails, and surrounding site hazards;
    3. Close-up / Macro Shots: Detailed close-ups of specific fracture surfaces, sheared bolts, worn wire ropes, severed electrical leads, or blood spatter patterns. Every close-up photograph must include a physical measurement scale (a calibrated forensic ruler, scale bar, or recognized scale coin) to eliminate perspective distortion.
  • Photogrammetry & 3D Laser Scanning (LiDAR): For major structural collapses (scaffolding collapses, bridge falsework failures, excavation cave-ins), high-definition 3D laser scanners or drone photogrammetry must be deployed to capture dense point clouds. This allows forensic structural engineers to build a digital twin and measure deflections, soil slumping, and structural angles to millimeter precision.
  • Debris Scatter Mapping: Utilizing total station surveying or triangulated tape measurements from fixed benchmarks (e.g., gridline columns, survey beacons) to map the exact resting coordinates of all fragments, dropped tools, and structural members.
  • Environmental & Meteorological Data: Documenting ambient weather conditions at the precise time of the incident: wind speed (from on-site anemometers), ambient temperature, relative humidity, precipitation, sun glare angles, and artificial illuminance levels (measured in lux with a calibrated photometer for night or tunnel work).

2. Paper Evidence (The Documentary Audit Trail)

Paper evidence interrogates the legal, procedural, and managerial architecture governing the work activity at the moment of failure. In South African construction, this focuses heavily on the Health and Safety File:

  • Legal Appointment Letters: Verifying written statutory appointments under Section 16(2) of the Act, Construction Manager (CR 8(1)), Assistant Construction Manager (CR 8(2)), Construction Safety Officer (CR 8(5)), and Construction Work Supervisor (CR 8(7)), ensuring competencies match the project scope;
  • Risk Assessments & Method Statements: The Baseline HIRA (CR 5(1)(a)), Issue-Based Risk Assessment, Task-Based Risk Assessment (TBRA), and approved Contractor Method Statements, checking whether the specific hazard that manifested was identified and controlled;
  • Pre-Task Briefings: Daily Safety Task Instructions (DSTIs) and toolbox talk attendance registers signed by the involved workers on the morning of the incident;
  • Plant & Equipment Registers: Daily pre-use checklists, monthly statutory inspection registers, manufacturer load charts, and annual load test certificates issued by an accredited Lifting Machinery Entity (LME) and Lifting Machinery Inspector (LMI) under Driven Machinery Regulation 18;
  • Personnel Competency & Medical Records: Operator licences and certificates of training for the mobile crane or construction vehicle (CR 23(1)(d)), driver's licences for public-road vehicles, rigging certificates of competency, site induction records, and valid Annexure 3 medical certificates of fitness issued by an occupational health practitioner under CR 7(8).

3. People Evidence (Witnesses & Cognitive Interviewing)

Human testimony provides the narrative context explaining how physical and paper systems interacted, but human memory is notoriously volatile and vulnerable to decay, stress, and peer influence:

  • Witness Identification & Immediate Separation: Identify all direct eyewitnesses (workers on the same scaffold or gang), secondary witnesses (workers in the immediate vicinity), supervisory personnel, and rescue first-aiders. Witnesses must be separated immediately into separate offices or vehicles. Preventing witnesses from discussing the event amongst themselves is essential to stop collective rationalization, groupthink, or the concoction of protective alibis.
  • Cognitive Interviewing Methodology: The CHSM must conduct interviews in a private, neutral, non-threatening environment, applying cognitive interviewing techniques:
    • Establish Rapport & Psychological Safety: Clarify that the investigation aims to uncover systemic failure to prevent recurrence, not to assign personal blame;
    • Free Uninterrupted Recall: Ask open-ended questions (e.g., "Please describe everything that happened from the time you started the morning shift until the scaffolding fell"). Never interrupt the witness during their initial narrative;
    • Sensory Context Reinstatement: Prompt the witness to recall physical sensations: "What did you hear right before the shudder? What were you looking at? What did the crane engine sound like?";
    • Avoid Leading Questions: Never ask leading or accusatory questions (e.g., avoid "Did you see Sipho forget to tie his lanyard?"; instead ask "What did you observe regarding fall protection?");
  • Documenting Statements: Statements must be documented in the witness's primary language, read back to the witness to confirm factual accuracy, signed in ink, dated, and counter-signed by an independent interpreter if translation was required.

4. Parts Evidence (Component Isolation & Forensic Metallurgical Testing)

Parts evidence encompasses the physical components whose mechanical, electrical, or structural failure precipitated the incident:

  • Component Seizure: Snapped wire ropes, sheared anchor bolts, ruptured hydraulic hoses, defective scaffolding couplers, damaged harness webbing, or malfunctioning electrical isolators;
  • Preservation & Packaging: Fragile fracture surfaces must never be cleaned with wire brushes, acid, or solvents, as this destroys microscopic fatigue striations. Fracture faces must be coated with protective desiccants, wrapped in bubble wrap, and sealed in rigid, tamper-evident plastic containers;
  • Chain of Custody (CoC): Every seized component must be accompanied by an unbroken Chain of Custody Log. The log must record: unique item tracking number, exact description, serial numbers, date/time seized, precise location found, identity of person who seized it, secure storage locker location, and signatures for every subsequent transfer of custody;
  • Laboratory & Non-Destructive Testing (NDT): Transferring components to SANAS-accredited metallurgical or engineering testing laboratories for destructive tensile testing, Charpy impact testing, metallographic grain structure analysis, or non-destructive testing (ultrasonic testing, magnetic particle inspection, dye-penetrant inspection) to establish whether failure resulted from mechanical overload, cyclic fatigue, hydrogen embrittlement, or manufacturing defects.

4. Incident Timeline Reconstruction: Pre-Contact, Contact, Post-Contact

Once physical, paper, people, and parts evidence is assembled, the investigation team reconstructs the incident chronologically. The investigation models the event across three distinct temporal phases:

┌────────────────────────────┐    ┌────────────────────────────┐    ┌────────────────────────────┐
│     PRE-CONTACT PHASE      │    │       CONTACT PHASE        │    │     POST-CONTACT PHASE     │
│ • Latent system defects    │───>│ • Energy release & impact  │───>│ • Emergency response & EMS │
│ • Substandard planning     │    │ • Barrier failure          │    │ • Secondary hazard control │
│ • Inadequate maintenance   │    │ • Anatomical / plant loss  │    │ • Statutory scene freeze   │
│ • Unaddressed warnings     │    │ • Contact duration (ms/s)  │    │ • Regulatory notification  │
└────────────────────────────┘    └────────────────────────────┘    └────────────────────────────┘

1. The Pre-Contact Phase

Encompasses all historical actions, management decisions, environmental changes, and organizational conditions leading up to the moment of failure. The investigator analyzes:

  • How the work was planned, procured, and scheduled;
  • Whether safety files and method statements were formally approved;
  • The maintenance, inspection, and certification history of machinery;
  • Worker competency, fatigue, shift lengths, and environmental stressors;
  • Substandard acts (e.g., bypassing interlocks) and substandard conditions (e.g., missing ties) that developed uncorrected prior to the event.

2. The Contact Phase

The precise instant—often lasting mere milliseconds or seconds—where energy transfer occurs that exceeds the physiological capacity of the human body or the structural strength of materials. The investigator evaluates:

  • Type of Energy: Kinetic/mechanical (impact, crushing), gravitational (fall from height), electrical (arc flash, electrocution), chemical (toxic vapor inhalation, acid burn), thermal (fire, steam), or acoustic;
  • Barrier Failure: Why physical barriers (guardrails, shoring, safety catches, harnesses) failed to absorb, deflect, or mitigate the energy transfer;
  • Points of Contact: Anatomical points of primary impact and load transfer vectors through equipment and structures.

3. The Post-Contact Phase

Encompasses all events following the cessation of energy transfer. The investigator analyzes:

  • The efficiency and competence of emergency response and first aid;
  • Whether the emergency action plan and evacuation functioned smoothly;
  • Actions taken to mitigate secondary hazards (e.g., fires, further collapses);
  • Preservation of the scene and compliance with statutory notification mandates under OHS Act Section 24.

5. Summary Matrix: The 4 P's Evidence Gathering Framework

Evidence StreamCritical On-Site Data SourcesKey Investigative Tools & MethodsPrimary Pitfalls & Spoliation Risks
Physical (Position)Spatial layout, debris field, impact points, ambient weather, illuminanceScaled photography, 3D laser scanning (LiDAR), photogrammetry, weather logsScene washed out by rain, debris shifted by emergency vehicles, uncalibrated scale
Paper (Documents)H&S File, Section 16(2)/CR 8 appointments, DSTIs, pre-use registers, Annexure 3 medical certificatesDocumentary audit, forensic timeline cross-referencing, digital access logsPost-incident fabrication or back-dating of inspection registers, missing signatures
People (Witnesses)Direct operators, riggers, ground workers, supervisors, medical first aidersCognitive interviewing, rapid witness separation, signed & sworn statementsWitness memory decay, collusion, intimidation by management, leading questions
Parts (Components)Sheared bolts, snapped cables, fractured welds, hydraulic lines, harness webbingSecure quarantine, chain of custody logs, metallurgical lab analysis, NDTFractures scrubbed with wire brushes, components discarded as scrap, broken custody trail

6. The CHSM Role during Regulatory Inquests & DEL Section 31/32 Inquiries

Following a fatal or catastrophic incident, the Department of Employment and Labour may institute a formal statutory inquiry under Section 31 (Investigations) or Section 32 (Formal Inquiries) of the OHS Act. A Section 32 inquiry constitutes a quasi-judicial hearing presided over by a designated DEL presiding inspector, vested with subpoena powers, the authority to administer oaths, and the power to examine witnesses under cross-examination. Inquest proceedings under the Inquests Act (Act 58 of 1959) may concurrently be initiated by the National Prosecuting Authority (NPA).

The Construction Health and Safety Manager plays a pivotal technical role during these proceedings: presenting the consolidated investigation dossier, demonstrating the operational effectiveness of site safety management systems, testifying on statutory appointments and HIRA processes, and assisting legal counsel in articulating how organizational systems operated in accordance with the standard of reasonable practicability.

Loading diagram...
Forensic Incident Investigation and 4 P's Evidence Acquisition Protocol
Test Your Knowledge

At 11:30 on a busy multi-story concrete frame project, a structural cantilever scaffold carrying four bricklayers collapses, dropping materials and workers onto the 2nd-floor protection fan. Two bricklayers suffer severe fractures, while two ground laborers are treated for shock. As the site emergency first aid team extricates the injured, twenty site workers and sub-contractor foremen gather at the perimeter arguing about who authorized the loading of masonry pallets onto the cantilever. How should the Construction Health and Safety Manager immediately manage the witnesses and gather human evidence in accordance with forensic best practice?

A

Instruct the site administrator to distribute blank incident forms to the workers to fill out collectively at home and return by the end of the week.

B

Identify and separate the eyewitnesses at once to prevent collusion, then interview each privately with open questions.

C

Convene an immediate mass toolbox meeting with all twenty workers in the main mess hall to debate the sequence of events and achieve a consensus statement on the cause of the failure.

D

Refrain from interviewing any witnesses until the Department of Employment and Labour inspector arrives and conducts all interviews under formal oath.

Test Your Knowledge

Following the catastrophic failure of a 16mm steel wire rope on a builder's material hoist, the hoist cage plunged three floors, severely injuring an artisan loading tile boxes. The CHS Manager arrives at the scene, cordons off the hoist base, and isolates the fractured wire rope end that parted at the winch drum. What forensic protocols must be enforced to preserve this component for laboratory failure analysis and maintain evidentiary integrity?

A

Cut off the fractured cable ends, place them in the project manager's vehicle trunk for safekeeping, and discard the winch drum to make space for the replacement hoist.

B

Protect the fracture surface without cleaning, seal it in a tamper-evident container, log chain of custody and send it to a lab.

C

Weld the broken wire rope back together immediately to perform an on-site tensile pull test using the site excavator.

D

Clean the fractured wire rope ends thoroughly with a wire brush and degreaser to expose the metallic grain structure before taking close-up smartphone photographs.

Test Your Knowledge

During structural steel erection on a wind turbine tower, an unsecured 24mm high-tensile connecting bolt falls 35 meters, piercing the hard hat of a sub-contractor surveyor below. The surveyor sustains a compound depressed skull fracture and is evacuated to hospital in critical, life-threatening condition. The erection subcontractor's project manager wants to clear the drop zone, sweep up the dropped tools, and re-torque the remaining steel connections to prevent structural distortion before the DEL inspector arrives. Under Section 24(2) of the OHS Act, how must the CHS Manager respond?

A

Authorize full cleanup and continuation of work because Section 24(2) only applies to incidents where a worker dies immediately on site.

B

Permit the project manager to sweep the tools provided high-resolution photographs are taken beforehand with a smartphone and sent to the client via messaging apps.

C

Allow the subcontractor to clear the scene provided the contractor deposits a R50,000 security bond with the local police station.

D

Freeze the scene under Section 24(2) until an inspector consents, except to rescue, remove the injured or prevent another incident.

Sections you finish are checked off in the contents.