Martyn’s Law Explained: Requirements, Duties & Compliance
Martyn’s Law is the commonly used name for the Terrorism (Protection of Premises) Act 2025. It introduces legal duties for qualifying premises and qualifying events to prepare for terrorist attacks and reduce the risk of physical harm to people. This guide explains the scope, the Standard and Enhanced Tiers, the responsible person, the four public protection procedures and what organisations can do now.
What is Martyn’s Law?
Martyn’s Law was introduced following the Manchester Arena terrorist attack and is named in memory of Martyn Hett. The legislation is intended to improve protective security and preparedness at qualifying premises and events.
It does not prescribe one security product or a single standard response for every site. The Act repeatedly uses the concepts of what is appropriate and reasonably practicable, so the procedures and — for the Enhanced Tier — measures need to reflect the specific premises or event.
Who does Martyn’s Law apply to?
A premises is not brought into scope simply because 200 people can fit inside it. It must meet the qualifying-premises criteria in the Act, including the relevant Schedule 1 use. The number of people reasonably expected to be present at the same time — including staff — then helps determine the tier.
199 or fewer
If the greatest number of people reasonably expected to be present at the same time is 199 or fewer, the premises will not be brought into scope by the numerical threshold.
200–799
Qualifying premises that reasonably expect between 200 and 799 people to be present at the same time, from time to time, are generally Standard Tier.
800 or more
Qualifying premises that reasonably expect 800 or more people to be present at the same time, from time to time, are generally Enhanced Tier unless a statutory exception applies.
Count the people actually expected
The assessment is based on a reasonable expectation of the greatest number of individuals present at the same time. It includes staff; it is not simply the building's theoretical capacity.
Important: the Home Office statutory guidance should be used to determine whether a particular premises or event meets the Act's full scope criteria. Thresholds alone do not determine scope.
Standard Tier vs Enhanced Tier
For qualifying premises within the Standard Tier, the responsible person must, once the Act is in force:
- notify the SIA as required;
- ensure appropriate public protection procedures are in place, so far as is reasonably practicable;
- consider the risk of an attack at the premises or in the immediate vicinity;
- make sure people who have responsibilities for the procedures understand their role; and
- co-ordinate with other responsible persons where the Act requires it.
Enhanced Tier premises and qualifying events must meet the public protection procedure requirements and additional duties, including:
- appropriate public protection measures, so far as is reasonably practicable;
- keeping those public protection measures under review;
- documenting the procedures and measures and the reasoning behind them;
- submitting the required compliance document to the SIA; and
- where the responsible person is an organisation, designating a sufficiently senior individual.
| Requirement | Standard Tier | Enhanced Tier / qualifying event |
|---|---|---|
| Notify the SIA when required after commencement | Yes | Yes |
| Appropriate public protection procedures | Yes | Yes |
| Additional public protection measures | No separate Enhanced Tier measures duty | Yes |
| Compliance document submitted to the regulator | Not an Enhanced Tier documentation duty | Yes |
| Designated senior individual where responsible person is an organisation | Not as a Standard Tier requirement under this provision | Yes |
The four public protection procedures
Standard and Enhanced Tier premises, and qualifying events, must consider four types of public protection procedure. They are intended to reduce the risk of physical harm if a terrorist attack occurs at the premises, event or in the immediate vicinity.
Evacuation
Getting people away from danger by moving them out of the premises or event, or away from an affected part of it.
Invacuation
Moving people to a safer place within the premises or event, including bringing people inside from an external danger where appropriate.
Lockdown
Securing the premises, event or part of it to prevent people entering or leaving and to restrict movement where this is appropriate to the threat.
Communication
Alerting people to danger and providing clear instructions as quickly as possible, where it is safe to do so.
No specific paid training course is mandated by the Act. However, staff who have responsibilities for implementing procedures need to understand the procedures, their role and how to carry it out effectively.
What does Martyn’s Law mean for lockdown procedures?
Lockdown is one of the four statutory public protection procedures, but the practical implementation depends on the site. Full, partial or zonal responses, alert methods, staff actions and testing belong in an operational lockdown plan rather than in this legal overview.
Martyn’s Law for schools, childcare and education
Childcare, primary, secondary and further-education premises receive special treatment under the Act. Where they meet the qualifying-premises criteria and can reasonably expect 200 or more people — including staff — to be present at the same time, they are Standard Tier even if the number reaches 800 or more.
Early years, primary, secondary & further education
These qualifying premises remain Standard Tier at 800+ rather than moving into the Enhanced Tier solely because of numbers. Events held at these premises are also subject to the Act's special treatment and are not qualifying events.
Higher education
Universities and other higher-education premises do not receive the same special treatment. Where the Act's criteria are met, they can be Standard Tier at 200–799 and Enhanced Tier at 800+.
Schools under 200 people are not brought into scope by the numerical threshold. Existing safeguarding, emergency and security planning may still make lockdown and communication arrangements sensible regardless of whether the Act applies.
Places of worship
A qualifying premises whose principal use is as a place of worship is Standard Tier where 200 or more people can reasonably be expected to be present at the same time. It remains Standard Tier even if 800 or more people are expected. The special treatment is tied to the principal use of the premises.
How Martyn’s Law applies to events
An event is not automatically a qualifying event merely because 800 people attend. The Act contains six criteria. In broad terms, the event must take place at qualifying premises for event purposes, not already be at Enhanced Tier premises, be accessible to the public, reasonably expect 800 or more people at the same time, have qualifying entry checks, and not take place at excluded premises.
800+ at the same time
The threshold is the greatest number reasonably expected to be present at the same time and includes staff working at the event.
Public access
The event must be accessible to the public in the sense used by the Act. Purely private events do not satisfy this criterion simply because they are large.
Entry checks
There must be measures checking a qualifying entry condition, such as payment, a ticket or pass, or relevant membership/guest status.
Enhanced duties
Qualifying events are subject to Enhanced Tier requirements, including public protection measures and compliance documentation.
Who is the responsible person?
Every qualifying premises and qualifying event has a responsible person. For premises, this is generally the individual, organisation or company with control of the premises for the relevant Schedule 1 use. For an event, it is the person with control of the premises in connection with their use for that event.
The legal responsibility cannot simply be passed to a contractor. Tasks can be delegated and specialist advice can be purchased, but the responsible person remains responsible for ensuring the Act's requirements are met.
Standard Tier
The responsible person must ensure the appropriate procedures are in place and notify the regulator when the notification requirements commence.
Enhanced Tier organisations
Where the responsible person is a company or organisation, a sufficiently senior individual must be designated to ensure compliance on behalf of the responsible person.
What are public protection measures?
Public protection measures are additional Enhanced Tier and qualifying-event duties. They are intended both to reduce vulnerability to terrorist attack and to reduce the risk of physical harm if an attack occurs.
Monitoring
Measures for identifying suspicious activity, items or developing threats at the premises, event and immediate vicinity.
Movement
Measures associated with how people enter, leave and move around the premises or event.
Physical safety & security
Appropriate physical or operational measures intended to reduce vulnerability and physical harm.
Security of information
Measures concerned with information whose loss or misuse could increase vulnerability or undermine protective security.
The Act does not impose a universal shopping list of CCTV, barriers, search equipment or other products. Enhanced Tier measures must be appropriate and reasonably practicable for the particular premises or event.
What organisations can do before Martyn’s Law commences
The SIA encourages organisations that may be in scope to start considering the legislation now. Preparation should focus first on understanding the site and the procedures people may actually need to use.
Determine whether the premises or event may be in scope
Use the Home Office statutory guidance rather than relying on capacity alone.
Establish the reasonable number of people expected
Consider the greatest number expected at the same time, including staff, and whether that level is expected from time to time.
Identify the responsible person
Clarify who controls the premises for the relevant use and who has authority to implement the necessary arrangements.
Review the four public protection procedures
Check evacuation, invacuation, lockdown and communication against realistic scenarios at the site and immediate vicinity.
Make responsibilities clear
People who may need to implement procedures should understand their role, how they receive instructions and what action they are expected to take.
For Enhanced Tier, assess measures and documentation
Consider the additional public protection measures, review arrangements, senior individual and compliance-document requirements.
Use official guidance and keep plans current
Follow Home Office, SIA and ProtectUK updates as commencement approaches and reassess arrangements where the site or operating conditions change.
Where a dedicated lockdown alarm can fit
A dedicated lockdown alarm can support a site's communication and lockdown procedures by helping alert people quickly and consistently. It is not itself a requirement of Martyn’s Law, and installing an alarm does not by itself make an organisation compliant. The equipment should support an appropriate procedure and the people expected to use it.
Martyn’s Law penalties and SIA enforcement
The SIA is the regulator. Once the relevant enforcement provisions are in force, the Act provides for compliance notices and financial penalties for non-compliance. The maximum amounts in the legislation include:
These are maximum statutory penalties, not automatic fines for every breach. The enforcement framework and the circumstances of non-compliance determine how regulatory powers may be used.
Martyn’s Law FAQs
Is Martyn’s Law already in force?
The Terrorism (Protection of Premises) Act 2025 has received Royal Assent, but the main duties are expected to commence in spring 2027. The SIA says the exact commencement date will be confirmed ahead of implementation.
Does Martyn’s Law apply to every premises with 200 people?
No. The premises must meet the Act's qualifying-premises criteria. If it does, the number of people reasonably expected to be present at the same time is then relevant to the tier.
Are schools with more than 800 people Enhanced Tier?
Not where the statutory special treatment applies. Qualifying childcare, primary, secondary and further-education premises remain Standard Tier when 200 or more people are reasonably expected, even if 800 or more may be present. Higher-education premises are treated differently and can fall within the Enhanced Tier.
Does Martyn’s Law require a lockdown alarm?
No specific lockdown alarm product is mandated. The law requires appropriate public protection procedures, including lockdown and communication. A dedicated alerting system may support those procedures where it is appropriate for the site.
Does Martyn’s Law require paid counter-terrorism training?
The Act does not mandate a specific paid course. However, people responsible for carrying out procedures need to know the procedures, understand their role and have the knowledge, experience and tools required to carry them out effectively.
Who is responsible for compliance?
The responsible person is determined by control of the qualifying premises for its relevant use, or control of the premises for a qualifying event. Tasks may be delegated, but overall legal responsibility cannot simply be transferred to a contractor.
Official Martyn’s Law guidance
For legal scope and compliance decisions, use the legislation and current Government guidance. This page is designed as an accessible overview, not a substitute for the statutory material.
Information checked against Home Office statutory guidance and SIA information available in September 2026. This page provides general information and is not legal advice. Organisations should assess their own circumstances against the Act and current statutory guidance.