Its purpose is not to create another layer of abstract compliance, but to make sure organisations responsible for publicly accessible places think ahead about how they would protect people if the worst happened.
Why Martyn's Law Matters
The Terrorism (Protection of Premises) Act 2025, commonly referred to as Martyn’s Law, will require certain publicly accessible premises and events to take proportionate steps to prepare for and reduce the risk of harm from terrorist attacks. The duties are not yet in force, but organisations potentially within scope should use the implementation period to assess their position and plan ahead.
The changes will be particularly relevant for organisations that operate venues, premises or events where members of the public gather in significant numbers. This may include hospitality, leisure, retail, sport, entertainment, visitor attractions, education, healthcare, local authorities, cultural venues, religious organisations, conference and exhibition venues, transport-adjacent sites not already covered by separate regimes, and businesses running large public events, festivals or ticketed gatherings.
Will Martyn's Law Apply to You?
The Act applies across the UK to qualifying public premises where it is reasonable to expect 200 or more people to be present at the same time, and to certain controlled access public events with 800 or more attendees. Duties fall on the “responsible person”, usually the organisation or individual with control of the premises or event.
The Act uses a tiered model. Standard tier premises, with expected attendance of 200 to 799 people, must notify the Security Industry Authority and have appropriate public protection procedures, such as evacuation, invacuation, lockdown and communication arrangements.
Enhanced tier premises, and qualifying events, must take additional reasonably practicable measures to reduce vulnerability to terrorism, document those measures and provide information to the regulator.
The Security Industry Authority will regulate compliance and is expected to take a proportionate, risk-based approach. Once the duties are in force, it will be able to request information, issue compliance or restriction notices and impose civil penalties for serious or persistent non-compliance.
Organisations should now identify whether their premises or events may be in scope, confirm who the responsible person is, review existing emergency procedures and monitor further guidance.
How MFMac Can Help
MFMac can help organisations assess whether their premises or events are likely to fall within scope, identify the compliance requirements that may apply and understand who will be responsible for meeting them. We can also support a practical review of existing policies, contracts, governance arrangements and emergency procedures, helping you prepare for implementation in a proportionate and commercially sensible way.
