Why crash and fire protected video memory is required

Across every mode that carries passengers

Onboard cameras are now standard equipment. Memory that survives the event the cameras exist to document is not. That gap is becoming widely recognised across every segment that carries passengers, and accident investigators and regulators are increasingly asking operators to close it.

Cameras almost everywhere. Survivable memory almost nowhere.

FTA-commissioned research surveyed the transit rail fleet and found a clean split between what is installed and what would survive an accident. Inward and outward facing cameras are widely deployed. Very few agencies hold those recordings in a module that is crash or fire protected. There is no evidence the bus picture is any different.

Widely deployed

Inward and outward facing cameras across transit rail agencies.

Rarely survivable

Very few agencies have data modules that are crash or fire protected.

^{Source: FTA Research Report FTA0200, Inward- and Outward-facing Audio and Video Recordings for Transit Rail Vehicles.}

What investigators keep finding

Across aviation, marine, rail, transit and school transportation, accident investigation bodies have reached the same conclusion repeatedly: a surviving video record of the operating compartment resolves questions that testimony and physical evidence cannot. Where video recordings survive, investigators have been able to establish the sequence of events, the actions and communications of the crew, occupant positions and restraint use. Where they do not, causation rests on inference — and a cause that cannot be established cannot be engineered out.

Investigators have asked for protected image and audio recording in every mode that carries passengers, and in some of them the regulators have followed. The record below is the direction of travel, not a single opinion.

Rail and rail transit

2010 · NTSB R-10-1 and R-10-2	Crash and fire protected inward and outward facing audio and image recorders in all controlling locomotive cabs and cab car operating compartments
2017 · NTSB R-17-13	The same requirement addressed to FTA for rail transit, with 12 hours of continuous recording, easily accessible
2019 · APTA RT-OP-RP-024-19	Recommended practice for crash and fire protected inward and outward facing audio and image recorders in transit operating compartments
2020 · FTA Safety Bulletin 20-2	FTA points transit agencies to the APTA recommended practice
2020 · Transport Canada SOR/2020-178	Locomotive Voice and Video Recorder Regulations: 48 hours on a crash-protected memory module to IEEE Std 1482.1-2013
2023 · FRA 49 CFR 229.136	Mandatory in the United States: image recordings held on a certified crashworthy memory module
2024 · NTSB R-24-10 and R-24-11	Regulations for inward facing image and audio recording, issued after East Palestine. These supersede R-10-1 and R-10-2

Aviation

2000 · NTSB A-00-30 and A-00-31	First push for crash-protected cockpit image recording under 14 CFR Parts 121 and 135
2011 · FAA TSO-C176	Performance standard for cockpit image recorder equipment
2013 · NTSB A-13-11 and A-13-12	Reiterated for all Part 121 aircraft
2015 · FAA TSO-C197	Criteria for lightweight crash-resistant data and image units
2020 · NTSB A-20-27 and A-20-28	Crash-resistant recorders and dedicated cockpit image recorders on newly manufactured turbine helicopters
2021 · NTSB Most Wanted List	Install crash-resistant recorders becomes a federal advocacy priority
2024 · Alaska Airlines 1282 findings	Retention length criticised: a two-hour overwrite loop lost the record
2026 · FAA 25-hour CVR rule	25 hours of crash-protected memory on newly manufactured aircraft. A video mandate remains unfulfilled

Made in the USA

All CHM Modules are Manufactured in the USA - FTA Buy America compliant

Highway, motorcoach and school bus

2009 · NTSB H-09-24	Crash-protected onboard video in all new motorcoaches, covering the driver compartment and the forward road view
2011 · NTSB Most Wanted List	Onboard video recorders for commercial vehicles
2012 · NTSB H-12-28	Standards for onboard event data and video recorders for school buses
2015 · NTSB Safety Alert SA-043	Existing onboard video systems often lack crash-protected memory housing
2018 · NTSB H-18-05 and H-18-06	Crash-resistant event recorders that isolate and protect video memory on newly manufactured school buses
2023 · NTSB H-23-14	Continuous-recording dual-facing cameras on medium and heavy commercial trucks

International — rail and rail transit

2003 · TSB Canada R03-02	National standards for locomotive data recorders, including on-board cab voice recording interfaced with communications systems
2013 · TSB Canada R13-02	In-cab video on all controlling locomotives in main-line operation, after the Burlington VIA derailment. Led to the 2018 Railway Safety Act amendment and to SOR/2020-178
2017 · RAIB (UK), Sandilands	Improve inspection and maintenance of on-tram CCTV, to greatly reduce the likelihood of recorded images being unavailable to an investigation
2025 · ORR (UK), Audenshaw closure	Metrolink forward facing tram CCTV found chronically unreliable through hard drive failures. Full system replacement over five years, with dashcams fitted in the interim

International — aviation

2012 · BEA France, AF447	Forty-one recommendations including flight recorder recoverability and localisation, after a two-year deep-ocean recovery of the crash-protected memory modules
2014 · UAE GCAA	At least one crash-protected recorder — flight data, cockpit voice or airborne image — on light commercial aircraft
2018 · TSB Canada A18-01	Mandatory lightweight flight recording systems for operators not currently required to carry them, certified at minimum to EUROCAE ED-155

International — highway, motorcoach and transit bus

2015 · TSB Canada R15-03	Dedicated crashworthy event data recorders on all commercial passenger buses, after the OC Transpo and VIA crossing collision. Data only, no video, and still not closed as fully satisfactory
2019 · BEA-TT France	Event data recorders recommended after investigators found no usable data had survived in the vehicle
2025 · BEA-TT France	Study an experimental installation of forward facing cameras in buses and coaches, with recordings extractable only by authorised bodies
2025 · Ontario coroner’s inquest, Westboro	Driver facing cameras on all Ottawa transit buses, among sixty recommendations
2026 · OTSI New South Wales, Greta	The coach carried no event recorder and no CCTV, and none was required — identified by the investigator as a missed opportunity for safety learnings

International — marine

2000 · IMO SOLAS V/20	Voyage data recorders with protected storage in a retrievable fixed or float-free capsule, on passenger ships and ships of 3,000 GT and above. In force July 2002
2012 · IMO MSC.333(90)	Revised performance standards: 48 hours of data in the protected unit and 30 days retained internally, for recorders fitted from 2014

The direction is the same in every mode and every jurisdiction, and the gap between recommendation and rule is measured in decades. In aviation the ask has been open since 2000 and a video mandate is still unfulfilled. In rail it became law: R-17-13 produced a recommended practice for transit, the FAST Act produced a federal rule for passenger railroads, and Canada regulated freight as well. Rail is the mode where this has already happened.

Recordings that do not survive the event do not answer the question.

Collisions and destructive fires happen across every mode

Passenger vehicles are lost in service across the country every year — struck in collisions, and destroyed by fires that break out in revenue operation. Propulsion type does not settle it: diesel, CNG and battery-electric vehicles have all been consumed by fire while in service, and electrification adds a documented and escalating lithium-ion hazard. In each case an unprotected recording inside the vehicle is lost with it.

Transit bus destroyed by fire in service. Nothing unprotected inside the vehicle survives an event like this.

160 – 300 per year

Transit bus fires, annual average reported by U.S. transit agencies.

5,800 per year

Transit bus-to-vehicle collisions, annual average.

≈ 379 per year

Reportable school bus fires — more than one per day, on a U.S. DOT study.

≈ 26,000 per year

School bus accidents, per NHTSA.

^{Sources: FTA National Transit Database and BTS transit safety data; FTA Report No. 0179, Transit Bus Crashworthiness; U.S. DOT school bus fire study; NHTSA.}

Collision damage to the cab end of a metro vehicle. The car body behind it is intact — the crushed zone is exactly where the cab equipment is mounted. A collision does not have to destroy a vehicle to destroy the recording.

The regulation is already here

Protected video memory is no longer a design choice. In passenger rail it is written into federal rule with a deadline attached, in Canada it covers freight as well, and the remaining segments are following. Specifying protected memory today costs a fraction of retrofitting a fleet against a deadline.

FRA-regulated passenger rail	Mandatory, with a date. 49 CFR 229.136(a)(5) requires image recordings from a lead cab to be held on a certified crashworthy memory module meeting Appendix D, or FRA-approved equivalent storage. Compliant image recording systems must be installed on the lead locomotives of all passenger trains by 12 October 2027, and any system installed since 12 October 2024 has had to comply already.
Canada, federally regulated railways	Mandatory since September 2022, and broader than the US rule: freight as well as passenger operations, voice recording required alongside video, and 48 hours of data on a crash-protected memory module meeting IEEE Std 1482.1-2013.
Rail transit	Recommended practice. FTA Safety Bulletin 20-2 points agencies to APTA RT-OP-RP-024-19, which sets minimum requirements for crash and fire protected inward and outward facing recorders in operating compartments.
Transit bus and school bus	No recorder requirement, and cameras already fitted almost everywhere. We offer the same protected memory to bus operators because the argument holds — a bus that burns out takes its recording with it exactly as a rail vehicle does. The modules are qualified against the rail standards, IEEE Std 1482.1-2013 and FRA 49 CFR Part 229; there is no bus standard for crash protected memory to be qualified against, and nothing here is a claim of compliance with FMVSS or the NSTSP. Federal legislation now in review would extend recorder requirements to transit buses.

What it means for an operator

The camera is not the gap. Cameras are already bought and installed. What is usually missing is memory that survives the event they exist to document.
Survivability has to be verified, not asserted. Ask which standard the memory was tested to, at which capacity, and by which laboratory. The answers vary widely.
Retrofit is normally an integration task. The CHM86 and CHM26 present to the recorder as network storage, so in most cases only the storage target changes.
Protected video improves more than investigations. The same surviving record supports proactive safety analysis, operator training and defence against unfounded claims.