A farm incident report vs a paper occurrence book: what holds up at the CCMA

What a record that holds looks like, and what a note that doesn't costs

A good farm incident report in South Africa does one thing a scribbled note never will. It still means something four months later, in a room you did not choose, in front of someone who was not there. Picture a diesel theft at six on a Tuesday evening. In the good version, within the hour the supervisor logs it against the worker's name, tags it as theft, records the time to the minute, attaches three photographs of the forced lock, and notes who was on shift. When the dismissal reaches the CCMA in November, the farm hands over a record that reads the same as it did the night it was made.

The bad version is the one most farms run. The theft goes into the occurrence book as a single line: “Diesel gone, about 200 litres, John?” No time to the minute. No photograph. No signature. By November the supervisor has left, the handwriting is anyone's guess, and the worker's representative asks one question: how do you know it was that day, that amount, that person? The farm cannot answer. The dismissal is ruled unfair, and the award is months of back-pay.

The incident happened either way. The difference is entirely in the record. At the CCMA, the Commission for Conciliation, Mediation and Arbitration, the onus is on the employer to prove the case, and a note that cannot be trusted proves nothing.

What an arbitrator or investigating officer actually needs

Start with who you are eventually writing for, because it is not yourself. It is a CCMA commissioner or a SAPS investigating officer reading your record cold, months later, deciding whether to believe it. Both want the same five things, and a record that supplies all five is hard to argue with.

Time. Not “that evening” but the date and the time to the minute, fixed when the entry was made, not written in from memory a week later. Place. Which shed, which gate, which block, ideally with GPS coordinates. Identity. The worker attached by name and employee record, not “John, the new one”. Evidence. Photographs, the damaged lock, the meter reading, attached to the entry itself. Chain. An unbroken account of who recorded what, when, and who handled any evidence after, so nobody can claim it was changed later.

The reason those five matter is the standard the CCMA uses. In a dismissal dispute the employer must prove the case on a balance of probabilities, meaning more likely than not, a far lower bar than a criminal court's “beyond reasonable doubt”. That sounds easy. It is not, when your only proof is a line nobody can stand behind. The commissioner is weighing credibility, and an unreliable record loses on credibility before the facts are even argued.

Where a paper occurrence book fails every test

A paper occurrence book is not worthless. It is just weak in exactly the places that decide a case. Run it against the five things above and it fails most of them.

The time is whatever was written, and nothing stops it being written the next morning, or edited later with a different pen. There is no proof the entry existed on the night it claims. Identity is a first name and a guess. Evidence lives somewhere else, if it exists at all: the photos are on a phone that has since been wiped, the lock was thrown away. The handwriting fades, the book gets wet, a page goes missing. And the chain of custody, the record of who touched the evidence and when, does not exist, so the other side can suggest the whole thing was assembled after the fact to justify a firing. None of that means the theft did not happen. It means you cannot prove it did. That is the real occurrence book versus digital question: not which is easier to write, but which one survives being challenged.

Same event, opposite evidential weight. The difference is not the theft. It is the record.

A farm incident report logged so it holds

Now the same incident, logged properly. A structured farm incident report captures the five things at the moment it is made, and it captures them in a form the law already recognises. The entry is dated and time-stamped automatically, so the record itself proves when it was created. The worker is attached from the employee list, not typed as a name. The incident is categorised, theft, damage, trespass, injury, so it can be found and compared later. Photographs attach to the entry, not to a separate phone. And every entry carries who made it.

This is where South African law is on your side, and most farm owners do not know it. Under the Electronic Communications and Transactions Act, a digital record cannot be refused as evidence just because it is electronic, and a record kept in the ordinary course of business counts, on mere production, as proof of the facts in it unless the other side can disprove them. The Act tells the court to weigh a data message on how reliably it was created, stored, and attributed to its author. A time-stamped, attributed, unaltered entry scores high on every one of those. A handwritten line scores low. Same event, opposite evidential weight.

From record to case: a CCMA defence or a SAPS statement

A good record does not go to the CCMA or SAPS by itself. It makes the case you build on top of it far stronger, in two directions.

At the CCMA. Because the employer carries the onus, your record is the evidence that discharges it. Once you produce a reliable, contemporaneous account of the misconduct, the burden shifts: the worker now has to answer it, rather than you having to prove a note nobody trusts. A structured security incident record turns “our word against theirs” into “our evidence against their explanation”.

With SAPS. Be clear about one thing: your farm system does not plug into the police database, and no honest vendor will tell you it does. What it does is give you the backbone of the statement you make at the station, the exact time, the photographs, the sequence, so the docket the investigating officer opens is built on a record made on the night, not a memory three weeks stale. It also preserves the chain of custody on your side. The same first-24-hours discipline after a break-in depends on exactly this: a record made while it is fresh, kept so it cannot be said to have changed. This is a different job from the shared incident record that warns the neighbouring farms; here the point is not sharing the record, it is making one that survives contact with a court.

The five fields that decide whether your record is evidence or just a note

One page. Five fields. If a farm incident report has all five, captured at the time and unaltered after, it is evidence you can stand behind. Miss any of them and you are back to a note. Pin it up where incidents get logged.

Labour Link's SAFE LINK runs the occurrence book as a digital, time-stamped record at security-admin.labourlinksoftware.co.za, where every incident is logged against a worker, categorised, dated to the minute, and carries its photographs and its author in one entry. That is the record that still means something in November, in a room you did not choose, in front of someone who was not there. Not extra admin. The thing that protects the farm on the day it finally matters.