Plain-English summary

What is Martyn’s Law?

The short version, in the order people usually ask the questions.

Prepared by Andrew Rogers, Vulcan Risk ManagementCertIOSHSIRMNVQ Level 6 Occupational Health & SafetyNEBOSH General CertificateLevel 3 DSEAR

Martyn’s Law is the common name for the Terrorism (Protection of Premises) Act 2025. It requires those responsible for publicly accessible premises where 200 or more people can be present, and for large events, to be prepared for a terrorist attack by having procedures and, for larger venues, protective measures. It applies across the UK and is expected to come into force in spring 2027.

Why is it called Martyn’s Law?

It is named after Martyn Hett, one of 22 people killed in the Manchester Arena attack on 22 May 2017. His mother, Figen Murray, campaigned for years for venues to be legally required to prepare for an attack. Before the Act was passed it was often called the “Protect Duty”.

Who does it apply to?

Publicly accessible buildings used for purposes listed in the Act — shops, pubs, restaurants, hotels, entertainment venues, places of worship, sports venues, visitor attractions, community halls, education settings and more — where it is reasonable to expect 200 or more people at the same time. It also covers qualifying events of 800 or more with controlled entry. See who it applies to and which tier you are in.

What are the two tiers?

TierWhoWhat is required
Standard200–799 people (and all schools, nurseries and places of worship of 200+)Notify the SIA; evacuation, invacuation, lockdown and communication procedures
Enhanced800+ people, and qualifying eventsThe standard duties plus public protection measures, a designated senior individual and a document for the SIA

What does a standard-tier venue actually have to do?

01

Evacuation

Getting people out and away from a threat — which may be a different route and a different meeting point from your fire plan, because the danger might be outside.

02

Invacuation

Bringing people inside, or further inside, to a safer part of the building away from glazing and entrances, when leaving would be more dangerous.

03

Lockdown

Stopping an attacker getting in or moving through the building: who locks which doors, shutters and gates, and how quickly.

04

Communication

How staff raise the alarm and tell visitors what to do — a code phrase, PA, radios or simply who shouts what — so people act without panic.

No equipment is required. More on the standard tier procedures page.

Who enforces it?

The Security Industry Authority (SIA). It will run the notification portal, give guidance and carry out inspections. See the SIA and Martyn’s Law.

When does it start?

Expected spring 2027; the exact date will be confirmed. See when Martyn’s Law comes into force.

What are the penalties?

Up to £10,000 for standard tier premises. For enhanced tier premises and qualifying events, up to £18 million or 5% of worldwide revenue, whichever is greater. See penalties.

Before you pay anyone: the Home Office says premises do not need to buy consultancy to meet the standard tier, and its guidance, the SIA’s guidance and the ProtectUK training are free. Neither the Home Office nor the SIA endorses any provider, including us. The legal responsibility stays with the person responsible for the premises; we help with the work, we do not take the duty off you.

Want a second pair of eyes on it?

Send the venue type, the most people you would expect in at once, and how many sites you run. We will tell you which tier you look to be in and whether the free route is enough before quoting anything.

Common questions

Is Martyn's Law the same as the Protect Duty?

Yes. 'Protect Duty' was the working name before the Terrorism (Protection of Premises) Act 2025 was passed. Martyn's Law is the name most people use now.

Does Martyn's Law apply to my small café?

Only if it is reasonable to expect 200 or more people there at the same time. Most small cafés are below that and are not in scope.

Is Martyn's Law in force now?

Not yet. It received Royal Assent on 3 April 2025 and is expected to come into force in spring 2027.

Page last reviewed and updated: . Prepared by Andrew Rogers, Vulcan Risk Management Ltd. Not legal advice; check the SIA guidance for your premises.