The Home Office has published statutory guidance on the Terrorism (Protection of Premises) Act 2025, commonly known as Martyn’s Law. The Security Industry Authority (SIA) has also published guidance explaining its role as the regulator.
The Act’s substantive requirements are not yet in force, so organisations do not currently need to comply with its new duties. However, the guidance provides important detail on how the legislation will operate and can help organisations understand whether their premises or events are likely to fall within scope.
Who the guidance is relevant to
Martyn’s Law will apply to certain publicly accessible premises and events where the conditions set out in the Act are met.
Qualifying premises
A qualifying premises will generally be a building, or a building and associated land, where it is reasonable to expect that at least 200 people may be present at the same time in connection with a qualifying activity.
This may include:
- Entertainment and leisure venues
- Hotels, restaurants, pubs and other hospitality businesses
- Retail premises and shopping centres
- Schools, colleges and universities
- Places of worship
- Healthcare premises
- Public buildings and community venues
Meeting the capacity threshold alone does not necessarily mean a premises is within scope. Organisations should review the qualifying activities, conditions and exclusions explained in the statutory guidance.
Qualifying events
A qualifying event will generally be an event where it is reasonable to expect that at least 800 people may be present at the same time and where access is controlled, for example through tickets, passes or invitations.
This could include:
- Music festivals and concerts
- Sporting events
- Fireworks displays
- Exhibitions and conferences
- Other large, controlled-access gatherings
What duties will Martyn’s Law introduce?
The duties will depend on whether an organisation is responsible for standard duty premises, enhanced duty premises or a qualifying event.
Standard duty premises
Premises where it is reasonable to expect between 200 and 799 people to be present will generally fall within the standard duty tier.
The responsible person will be required to put appropriate public protection procedures in place. These procedures must address how the organisation would respond if an act of terrorism occurred at the premises or in the immediate vicinity.
Enhanced duty premises and qualifying events
Premises and qualifying events where it is reasonable to expect at least 800 people to be present will generally be subject to enhanced duties.
In addition to public protection procedures, the responsible person will need to consider appropriate measures to reduce the vulnerability of the premises or event and limit the risk of physical harm.
The measures required will depend on what is reasonably practicable for the particular premises or event. They may include physical, procedural, personnel and technical measures.
Why this matters
When the relevant provisions come into force, Martyn’s Law will introduce significant responsibilities for many organisations responsible for publicly accessible premises and events.
Organisations may need to consider how they would respond to a terrorist incident and what practical procedures should be in place to help protect employees, visitors and members of the public.
This may involve reviewing:
- Evacuation, invacuation and lockdown procedures
- Communication arrangements during an incident
- Roles, responsibilities and decision-making processes
- Staff information, instruction and training
- Access control and wider security measures
- How emergency services would be supported
- How procedures take account of disabled people and others who may need assistance
Procedures for responding to a suspected terrorist attack may differ from standard fire evacuation procedures. Organisations should ensure both sets of arrangements are clearly understood and appropriately integrated.
What organisations should do now
Although the Act’s new duties are not yet in force, organisations should use the implementation period to understand the guidance and consider how the legislation may affect them.
Review your premises and events
Review the activities carried out at each premises or event, the expected number of people present and how access is controlled. This will help determine whether the legislation is likely to apply.
Identify the responsible person
Consider which individual or organisation has control of the premises or event and will be responsible for meeting the future requirements.
Where responsibilities are shared between several parties, these arrangements should be clearly understood and documented.
Review existing emergency procedures
Review current arrangements for evacuation, invacuation, lockdown and communication. Consider whether employees understand their responsibilities and whether procedures would be effective during a terrorist incident.
Consider accessibility
Emergency and security procedures should take account of disabled people and anyone who may require additional assistance. Accessibility should be considered when procedures are developed, communicated and tested.
Keep records of your preparations
Record the reviews you carry out, any gaps identified and the actions being taken. Clear records will support future compliance and demonstrate how decisions have been made.
Monitor official updates
Further guidance and supporting resources are expected before the Act comes fully into force. Organisations should continue to monitor updates from the Home Office, the SIA, ProtectUK and the National Protective Security Authority.
Official guidance and resources
You can find further information from the following official sources:
- Home Office statutory guidance on the Terrorism (Protection of Premises) Act 2025
- Understanding Martyn’s Law and the SIA’s role as regulator
- ProtectUK Martyn’s Law guidance and resources
- National Protective Security Authority (NPSA)
How PIB Risk Management can help
Our Health & Safety Risk Management specialists can help your organisation understand how Martyn’s Law may affect your premises or events and prepare for the future requirements.
We can support you by:
- Reviewing whether your premises or events are likely to fall within scope
- Assessing existing emergency and security procedures
- Identifying gaps in evacuation, invacuation and lockdown arrangements
- Reviewing roles, responsibilities and communication procedures
- Supporting the development and testing of practical emergency plans
- Helping employees understand their responsibilities through information and training
Martyn’s Law is not yet fully in force, but the publication of statutory guidance gives affected organisations an opportunity to begin preparing. Reviewing your arrangements now can make future compliance easier and help improve the safety and security of your premises or events.
