Terrorism protection: protecting premises and the importance of Martyn’s Law in the UK

Terrorist attacks can have devastating consequences in public places, making effective preparedness and protective security essential. In the UK, the Terrorism (Protection of Premises) Act 2025, commonly known as Martyn’s Law, establishes a legal framework requiring certain premises and events to prepare for terrorist attacks and, for larger venues, take proportionate steps to reduce their vulnerability. The Act applies across England, Wales, Scotland and Northern Ireland.  

The Act received Royal Assent on 3 April 2025, meaning it has now passed into law. However, its substantive requirements are not yet in force, giving organisations time to review their current arrangements and prepare for implementation. 

What is Martyn’s Law 

Martyn’s Law was introduced following the 2017 Manchester Arena terrorist attack, in which 22 people were killed, including 29-year-old Martyn Hett. His mother, Figen Murray, campaigned for stronger legal requirements to improve security at publicly accessible venues and help reduce the risk and impact of future attacks. 

Who will Martyn’s Law apply to? 

Martyn’s Law places legal responsibilities on those in control of qualifying public premises and events. Its requirements are based on expected attendance, with smaller qualifying premises focused on proportionate preparedness and larger premises and events subject to more detailed planning, documentation and protective measures. 

Tiered approach – standard and enhanced 

Martyn’s Law uses a tiered approach, based primarily on the number of people reasonably expected to be present. 

Standard Duty (Standard Tier) applies generally to qualifying premises where 200–799 individuals, including staff, may reasonably be expected to be present at the same time. Examples can include shops, restaurants and other publicly accessible premises within the scope of the Act. The responsible person must notify the Security Industry Authority (SIA) and, so far as reasonably practicable, establish appropriate public protection procedures. These must address evacuation, invacuation (moving people to a place of relative safety within a building), lockdown and communication in response to a suspected terrorist attack. Staff who may need to implement these procedures must be made aware of them. The standard duty is intended to focus on proportionate, generally low-cost preparedness rather than requiring specific physical security equipment. 

Enhanced Duty (Enhanced Tier) applies to qualifying premises where 800 or more individuals may reasonably be expected to be present at the same time. Qualifying events can also fall within the enhanced tier where the statutory criteria are met, including public accessibility, controlled entry and an expected attendance of 800 or more people. 

Enhanced-duty organisations must meet the standard-duty requirements but also implement, so far as reasonably practicable, public protection measures designed both to reduce vulnerability to terrorism and to reduce the risk of physical harm. Depending on the circumstances, measures could include monitoring arrangements, CCTV, bag-search procedures, vehicle checks or other appropriate security measures. They must also document their procedures and measures, assess how they reduce vulnerability and risk, and provide the documentation to the SIA. 

Overall, Martyn’s Law  represents an important shift towards a consistent culture of preparedness. By requiring those responsible for qualifying premises and events to consider foreseeable terrorist risks and establish proportionate measures, it aims to protect life, improve emergency response and reduce the potential impact of an attack. Although the substantive legal duties are not yet in force, organisations within scope should use the available guidance to review their existing security and emergency arrangements ahead of commencement. 

What will organisations need to do? 

Organisations should start by identifying whether their premises or events are likely to fall within scope, then reviewing the emergency and security arrangements they already have in place. This may include evacuation, invacuation, lockdown and communication procedures, as well as staff awareness, training and scenario-based exercises. Larger venues and qualifying events may also need to consider additional protective measures, such as CCTV, access control, screening, monitoring arrangements or vehicle checks, where these are proportionate to the risk. 

How can organisations prepare? 

Preparation should be based on the nature of the premises or event, the number of people expected to be present, the surrounding environment and any vulnerabilities that could increase the likelihood or impact of an attack. Security arrangements should be reviewed regularly and updated whenever circumstances change. 

The Government’s ProtectUK initiative provides valuable guidance, training, and practical resources to help businesses and organisations strengthen their protective security and preparedness. Using recognised guidance can help organisations review their arrangements in a proportionate way while continuing to , maintain welcoming and accessible environments for the public. 

While the legal duties will apply to those responsible for qualifying premises and events, effective preparedness depends on clear procedures, trained staff and a shared understanding of how to respond in an emergency. A proportionate approach can support public safety without making premises feel less welcoming or accessible. 

Martyn’s Law represents a significant step forward in improving public safety by making preparedness a legal requirement for qualifying premises and events. .  By reviewing current arrangements early, organisations can better understand what may be expected of them and take proportionate steps to improve resilience ahead of the duties coming into force. 

How can SafeWorkforce support? 

SafeWorkforce can support your organisation by helping you understand your responsibilities and develop proportionate arrangements. This can include reviewing existing emergency procedures, policies and, risk assessments, identifying potential gaps, and providing practical guidance on preparedness ahead of the new duties coming into force.