Martyn's Law: what it means for your venue or business
Find out whether the Act applies to you, what it will require, and how to prepare in a practical, proportionate way, with support from a former Police Counter-Terrorism Security Coordinator.
Where things stand
The Terrorism (Protection of Premises) Act 2025, known as Martyn's Law, became law on 3 April 2025.
The main duties are not yet in force. The Government committed to an implementation period of at least 24 months, and as of autumn 2026, no start date has been announced. Commencement is widely expected in 2027.
The Home Office published its statutory guidance in April 2026, and the Security Industry Authority (SIA) will regulate the new duties.
You do not have to comply yet, but organisations that are likely to be in scope are encouraged to prepare now.
What is Martyn's Law?
Martyn's Law is named after Martyn Hett, who was one of the 22 people killed in the Manchester Arena attack in 2017. It requires the people responsible for certain public premises and events to be prepared for a terrorist attack, so that they can reduce the risk and help keep people safe if one happens.
The approach is deliberately tiered. Smaller venues have lighter duties, and the largest have more demanding ones.
Does it apply to your business?
The Act covers a wide range of publicly accessible places, such as pubs, restaurants, hotels, theatres, cinemas, shops, sports grounds, visitor attractions, places of worship, and education and health settings. Whether it applies depends on how the premises are used and how many people can reasonably be expected to be present at one time.
In very basic terms, there are two tiers; Standard Tier - where it is reasonably expected that there will be between 200 - 799 persons on the premises (including staff and contractors) from time to time, and the Enhanced Tier - where it is reasonably expected that there will be 800 or more persons on the premises (including staff and contractors) from time to time.
Standard Tier premises require that public protection procedures, such as evacuation, invacuation, lockdown and communication, are in place so far as reasonably practicable.
Enhanced tier premises, or qualifying events of 800 or more persons must meet the standard requirements, plus proportionate public protection measures and a documented assessment.
Venues with fewer than 200 people are not in scope, but the same principles are sensible good practice for any public-facing business.
What it means in practice
For standard tier premises, the focus is on knowing what to do in an emergency and making sure your people know it too. That means clear procedures for evacuating, moving people to safety inside the building, locking down, and communicating, with staff who understand their role.
For enhanced tier premises and events, you add a deeper understanding of your terrorism risk, proportionate measures to reduce it, documented plans, and named accountability at senior level.
The regulator has real powers. The SIA can issue compliance notices and financial penalties, and for enhanced tier premises these can be substantial. The best protection is to prepare early and in proportion, and to keep a clear record of your reasoning.
How I can help your business
Effective compliance is not simply about documentation. It is about ensuring your organisation is genuinely prepared through suitable procedures, trained staff and tested response plans.
We help venues and businesses turn the legislation into a practical plan that fits their building, their budget and their level of risk.
Scope and tier check. Work out whether your premises or events are likely to be in scope, which tier applies, and who the responsible person is. This is especially useful for multi-site portfolios, shared buildings and venues with changing capacities.
Counter-terrorism risk assessment. A structured, site-specific assessment of the threat, your vulnerabilities and sensible, proportionate measures.
Procedures review and development. Check your evacuation, invacuation, lockdown and communication arrangements, and strengthen them where needed.
Staff awareness training. Practical counter-terrorism awareness for the people who will be on duty when it matters.
Tabletop exercises and debriefing. Test your plans in a safe environment, then capture and act on what you learn.
Design-stage advice. For new builds and conversions, build Martyn's Law into the design from the start. See counter-terrorism assessments for planning applications.
How it works
A conversation. We talk through your premises, your uses and your concerns.
A scope check. I confirm what is likely to apply to you and what is not.
A proportionate plan. I recommend practical steps in priority order, so you can spend where it counts.
Training and testing. Your people learn the procedures and you test them.
Why ProtectRM
I served in the police for thirty years, including many years as a Counter Terrorism Security Coordinator, advising on the protection of crowded places.
I hold a Level 6 Advanced Diploma in Counter Terrorism Risk Management, and I focus on advice that is proportionate, practical and easy for your team to follow. I am independent and do not speak on behalf of the police.
Frequently asked questions
Do I need to do anything now? The duties are not in force yet, so you are not legally required to comply. But preparing early gives you time to spread the cost, train your people and avoid a rush when a start date is announced.
How do I know whether my venue is in scope? It depends on the use of the premises and the number of people who can reasonably be expected to be present. I can carry out a scope check for you, and I will tell you plainly if the Act does not apply.
We have fewer than 200 people. Should we still do something? You are not in scope, but simple procedures and staff awareness are good practice for any public-facing business, and they cost little.
We rent space in a larger building. Who is responsible? This depends on who has control of the premises, and shared buildings can be complicated. Get in touch and we can work through it.
Will you guarantee that we comply? No one can guarantee that. Compliance is judged by the regulator against the statutory guidance. What I can do is help you prepare sensibly, document your reasoning and reduce your risk.
Is this legal advice? No. The information on this page is general guidance. For legal advice on your obligations, speak to a solicitor, and always refer to the Home Office statutory guidance.