Martyn's Law - Overview
If you are interested in taking part in a free Martyn's Law compliance case study, please email info@isca-security.com.
​​​
Terrorism (Protection of Premises) Act 2025 (Martyn’s Law)
​
The Terrorism (Protection of Premises) Act 2025, widely known as Martyn’s Law, received Royal Assent on 3 April 2025. The legislation represents a major shift in the UK’s approach to protective security, introducing statutory requirements for public premises and events to improve preparedness against terrorism.
​
Named in memory of Martyn Hett, who was killed in the Manchester Arena attack, the Act reflects the Government’s commitment to strengthening public safety and creating consistent counter terrorism preparedness standards across the UK.
​
The legislation will apply across England, Wales, Scotland and Northern Ireland, ensuring a unified national framework. A minimum 24 month implementation period is expected before the Act comes fully into force, allowing organisations time to understand, plan for and implement their obligations.
​
What Martyn’s Law Requires
​
Martyn’s Law places a legal duty on those responsible for certain public premises and events to consider how they would respond to a terrorist attack, put in place appropriate public protection procedures and, for larger venues and events, implement proportionate security measures to reduce vulnerability.
​
The aim is to ensure that qualifying premises and events are better prepared, more resilient and capable of responding effectively should an attack occur.
​
A Tiered, Proportionate Framework
​
The Act introduces a tiered approach, based on the number of individuals reasonably expected to be present at the same time.
​
Standard Duty Premises (200 to 799 persons)
​
Premises fall within the standard duty category if they are located within a building, are used for specified public activities such as retail, hospitality, leisure, worship or sports venues, it is reasonable to expect at least 200 individuals may be present at least occasionally, and they are not exempt under Schedule 2.
​
Requirements include notification to the Security Industry Authority and implementation of appropriate public protection procedures.
​
These procedures focus on preparedness and response, including evacuation, invacuation which involves moving individuals to a place of safety, lockdown and communication protocols during an incident.
​
For standard duty premises there is no requirement for physical security measures. The emphasis is on proportionate, low cost procedural readiness.
​
Enhanced Duty Premises and Qualifying Events (800 or more persons)
​
Premises or events where 800 or more individuals may be present are subject to enhanced duties.
​
In addition to standard requirements, responsible persons must implement reasonably practicable public protection measures to reduce vulnerability and harm, monitor premises and their immediate vicinity appropriately, document procedures and protective measures, provide a written assessment to the Security Industry Authority demonstrating how measures reduce risk, and appoint a designated senior individual responsible for compliance where the responsible entity is not an individual.
​
Qualifying events such as ticketed concerts or large gatherings are included where entry conditions are controlled and attendance thresholds are met.
​
Who Is the Responsible Person
​
For premises, the responsible person is the individual or organisation with control of the premises in relation to its principal use.
​
For events, it is the person or organisation that has control of the premises for the purpose of delivering the event, regardless of whether subcontractors are used for security or event management.
​
This ensures accountability sits with those who exercise operational control.
​
Regulation and Enforcement
​
A new regulatory function within the Security Industry Authority will oversee implementation and enforcement.
​
The Security Industry Authority will provide guidance and advisory support, publish statutory guidance approved by the Home Secretary and monitor compliance.
​
Where serious or persistent non-compliance occurs, enforcement powers include compliance notices, monetary penalties, restriction notices and criminal offences in certain cases.
The regulator’s stated intent is to support first and enforce where necessary.
​
Why Martyn’s Law Matters
​
Since March 2017, 15 domestic terror attacks have occurred in Great Britain, excluding Northern Ireland-related terrorism, and 43 late-stage plots have been disrupted.
​
The threat landscape remains complex and unpredictable. Terrorists target a wide range of locations, and attacks may impact venues directly or indirectly.
​
While many organisations already implement strong security practices, counter terrorism preparedness has historically lacked the consistency seen in areas such as health and safety. Martyn’s Law addresses this gap by introducing clear, proportionate legal obligations.
​
Preparing for Compliance
​
Although statutory guidance will be published ahead of implementation, organisations should begin assessing whether their premises or events fall within scope, reviewing occupancy levels and historical attendance data, evaluating existing emergency and security procedures, identifying governance and accountability structures, and planning proportionate improvements.
​
The implementation period provides a critical opportunity for structured, strategic preparation rather than reactive compliance.
​
How We Support Organisations Under Martyn’s Law
​
As a specialist security and risk consultancy, we provide comprehensive support to ensure organisations meet their obligations confidently and effectively.
​
Our services include training and awareness programmes for duty holders, senior leadership and frontline staff, including scenario-based exercising and counter terrorism awareness. We deliver premises and event threat assessments, vulnerability mapping and gap analysis. We develop public protection procedures and enhanced duty documentation aligned to regulatory expectations. We also provide protective security strategy, governance structuring, senior responsibility designation support and ongoing compliance assurance.
​
We take a proportionate, practical approach that ensures measures are effective, defensible and aligned with operational realities.
​
Building Resilience, Not Just Compliance
​
Martyn’s Law is not simply a regulatory requirement. It is an opportunity for organisations to strengthen resilience, protect their people and demonstrate leadership in public safety.
Early preparation enables organisations to avoid reactive last minute compliance, embed security within organisational culture, protect reputation and stakeholder confidence, and reduce both vulnerability and liability.
​
Our expertise ensures that compliance becomes a strategic advantage rather than a burden.