Martyn's Law - Terrorism (Protection of Premises) ACT
What is Martyn's Law?
Martyn's Law is proposed legislation, more formally known as the Terrorism (Protection of Premises) Act. It has previously been known as the Protect Duty. Through Martyn’s Law, premises will be better prepared and ready to respond in the event of a terrorist attack.
The Terrorism (Protection of Premises) Act will make sure public premises and events are better prepared for and protected from terrorist attacks; requiring them to fulfil necessary but proportionate steps according to their capacity size to mitigate the impact of a terrorist attack and reduce harm.
Background to Martyn's Law
Martyn's Law is named in tribute to Martyn Hett, who was killed alongside twenty-one others in the Manchester Arena terrorist attack after an Ariana Grande concert in 2017. Figen Murray, Martyn's mother, and the Martyn’s Law campaign team have tirelessly campaigned for the introduction of new legislation.
What premises are in scope?
To be in scope, premises and events must be accessible to the public, they must be used for a purpose listed in the Bill (e.g. entertainment and leisure, retail, food and drink) and have a capacity of 200 or more individuals. Premises may be a building (including part of a building or a group of buildings) or a building and other land.
Businesses and events will be divided into two tiers based on capacity size. The Standard Tier includes premises with a capacity between 200-799. The Enhanced Tier includes premises and events with a capacity over 800 people.
What does Martyn's Law mean for my premises?
Martyn’s Law received Royal Assent on 3rd April 2025 and has now become law. Before the law comes into effect, there is an anticipated period of at least two years for businesses to prepare for compliance and for statutory guidance to be provided to those businesses effected.
Whilst Martyn's Law isn't being enforced yet, it does not mean premises accessible to the public should do nothing while waiting for the SIA to begin enforcement. Preparing plans to meet the requirements of the Act can begin now. Risk holders should undertake activities to understand their risk from terrorism, identify what the security vulnerabilities are and what can be implemented to reduce or mitigate those vulnerabilities.
What are the requirements?
Premises which expect 200-799 individuals at the same time, from time to time fall into the Standard Tier. The responsible person is required to notify the regulator (SIA) of their premises. They must also have appropriate and reasonably practicable public protection procedures in place to reduce the risk of physical harm being caused to individuals if an attack was to occur there or nearby. This includes a plan for Evacuation, Invacuation, Lockdown and a process of Communication.
Premises and events which can expect 800+ individuals fall into the Enhanced Tier. The responsible person must notify the regulator (SIA) that they are responsible for their premises or event. As with the Standard Tier, appropriate and reasonably practicable public protection procedures are required to reduce the risk of physical harm being caused to individuals if an attack was to occur there or nearby. In addition, the premises or event must have in place appropriate and reasonably practicable measures that could be expected to reduce both the vulnerability of the premises or event to an act of terrorism occurring, and the risk of physical harm being caused to individuals if an attack was to occur there or nearby. Both the public protection procedures and measures in place, or proposed to put in place, must be documented and provided to the SIA.
How will this law be enforced?
Martyn’s Law will extend to and apply across the whole of the United Kingdom. The Regulator, which is to be the Security Industry Authority (SIA), will monitor compliance and advise the premises within scope of the law.
The Government will establish an inspection and enforcement regime, promoting compliance and positive cultural change and issuing credible and fair sanctions for serious breaches. The Regulator will have the tools to address non-compliance, including investigatory powers and monetary sanctions.
So what now?
Since the law is expected to take at least two years to be enforced, businesses have ample time to prepare their premises to comply with the new requirements. Statutory guidance will be available to support those who feel confident in meeting the requirements independently. However, for businesses that may need assistance, Premises Protect can help navigate the process, providing the necessary plans and assessments tailored to the specific tier your premises fall under, ensuring full compliance with the law.
