The Terrorism (Protection of Premises) Act 2025, also known as Martyn’s Law, received Royal Assent on Thursday 3 April 2025. This Act delivers the Government’s manifesto commitment to strengthen the security of public premises and events. The legislation was inspired by the tragic Manchester Arena attack, in which Martyn Hett lost his life. Figen Murray, Martyn’s mother, campaigned tirelessly for stronger public protections, and her efforts were pivotal in bringing this law to fruition. 

Martyn’s Law introduces a clear legal duty for organisations to take proportionate steps to reduce the risk of attack and to be prepared in the event of an incident. While the law is now official, there is a two-year implementation window, meaning full compliance will be required from 2027. This gives businesses and organisations the time to understand their responsibilities, assess their premises, and prepare and plan effectively. 

Which Premises and Events Are in Scope  

Martyn’s Law applies to a wide range of publicly accessible premises and events. Any building or location with clearly defined boundaries that is used for entertainment, leisure, hospitality, retail, cultural, education, health, religious, or public purposes could be in scope. This includes theatres, cinemas, concert halls, sports facilities, hotels, restaurants, shopping centres, museums, galleries, exhibition halls, schools, universities, hospitals, clinics, places of worship, town halls, community centres, and transport hubs such as train stations and airports. Large public events, including concerts, festivals, exhibitions, and conferences, also fall under the legislation.  

The law uses a tiered approach to match security requirements with the size and nature of the premises. Locations where 200 to 799 people may be present at any one time are considered “standard duty.” For these premises, organisations must undertake risk assessments, create documented security plans, implement proportionate protective measures, and ensure staff are aware of emergency procedures. Larger venues or events where 800 or more people may be present fall under “enhanced duty.” Enhanced duty requires more robust planning, appointment of a senior security officer, regular review of security measures, and stronger physical and procedural protections.

   

What Organisations Must Do to Comply  

Under Martyn’s Law, organisations will need to assess the risks associated with their premises and activities. This includes considering occupancy levels, building layout, access and exit points, and potential vulnerabilities. Based on this assessment, organisations must develop a documented security or public protection plan that outlines procedures for evacuation, lockdown, communication, and general emergency response. 

Proportionate protective measures might include CCTV, access control, perimeter security, and trained staff or volunteers. Staff must understand their responsibilities, be able to recognise suspicious behaviour, and respond appropriately in an emergency. Maintaining accurate records, including risk assessments, training logs, and plan reviews, will be essential to demonstrate compliance. For enhanced duty premises, additional steps include appointing a senior security lead and regularly reviewing and updating security measures to ensure they remain effective. 

The Role of the Security Industry Authority (SIA)

Under the Terrorism (Protection of Premises) Act 2025, the Security Industry Authority (SIA) has been appointed as the regulator responsible for overseeing how organisations meet their duties under Martyn’s Law. Once a premises or event falls within scope, duty-holders will be required to notify the SIA, which will then act as the primary point of regulatory contact. 

The SIA’s role is focused on helping organisations understand and meet their obligations. It will issue statutory guidance explaining what the law requires, provide advice and support, and set out clear expectations for both standard and enhanced duty premises. As the regime develops, the SIA will also have the authority to review documentation, engage with venues to assess compliance, and when necessary, undertake inspections or investigations. 

While the initial phase of Martyn’s Law centres on guidance and support rather than enforcement, the SIA’s regulatory powers will expand as the law is fully implemented. By Spring 2027, the SIA expects to have its full regulatory functions in place, including the ability to take action where organisations fail to meet their legal responsibilities. 

Martyn’s Law is a significant step toward improving safety in publicly accessible buildings and events across the UK. Organisations now have a clear legal responsibility to protect staff, visitors, and customers. Beyond compliance, careful security planning reduces risk, strengthens operational resilience, and ensures a rapid and effective response should an incident occur. 

Early preparation is essential. Organisations can begin by reviewing their premises, assessing potential risks, and developing proportionate security measures. This allows businesses to allocate resources effectively, manage workloads, and achieve compliance well before the 2027 deadline. 

Get Expert Advice on Compliance

For advice on how to meet the requirements of Martyn’s Law, reach out to our team today. Our specialists can help you assess your venue and plan the right security measures.