What is Martyns Law?
What is Martyn’s Law?
Martyn’s Law is the commonly used name for the Terrorism (Protection of Premises) Act 2025. It introduces a legal duty for certain publicly accessible premises and events across the UK to be better prepared for a terrorist attack and take proportionate steps to protect people.
The legislation was created following years of campaigning by Figen Murray OBE, whose son Martyn Hett was one of the 22 people killed in the Manchester Arena attack in 2017.
Is Martyn’s Law currently in force?
The Act received Royal Assent on 3 April 2025, but its main requirements are not yet in force. The Government allowed an implementation period of at least 24 months so that organisations and the Security Industry Authority (SIA) can prepare.
Organisations do not currently have a legal duty to comply. However, those likely to fall within scope can begin reviewing their existing security arrangements and emergency procedures using the official guidance.
Who will Martyn’s Law apply to?
The Act covers certain premises used by the public where 200 or more people, including staff, may reasonably be expected to be present at the same time. Examples may include:
- Shops and shopping centres
- Restaurants, pubs and nightclubs
- Hotels
- Theatres, cinemas and entertainment venues
- Sports grounds and leisure facilities
- Places of worship
- Schools, colleges and universities
- Hospitals and healthcare premises
- Museums, galleries and visitor attractions
- Transport premises
Whether a location is in scope depends on the way the premises are used, the number of people reasonably expected to be present and the detailed conditions and exclusions in the Act. Capacity is not always the same as the building’s maximum fire capacity.
The person or organisation with control of the premises in connection with its use will normally be the responsible person. Where more than one party has control, they may need to cooperate.
The two tiers of Martyn’s Law
Standard tier: 200 to 799 people
The responsible person will need to notify the SIA and ensure appropriate public protection procedures are in place, so far as reasonably practicable.
These procedures cover:
- Evacuation – moving people out of the premises or away from danger
- Invacuation – moving people to a safer place within the premises
- Lockdown – securing the premises to restrict entry, exit or an attacker’s movement
- Communication – alerting people and giving clear instructions during an incident
Staff who may need to carry out these procedures must understand what to do. The Act does not automatically require standard-tier premises to make physical alterations or buy specific security equipment.
Enhanced tier: 800 or more people
Enhanced-tier premises must meet the standard requirements and take further, reasonably practicable measures to reduce their vulnerability and the risk of physical harm.
These measures relate to:
- Monitoring the premises and its immediate vicinity
- Controlling the movement of people
- The physical safety and security of the site
- Protecting sensitive security information
If the responsible person is an organisation, it must designate a senior individual to oversee compliance. It must also record its procedures and measures in a compliance document and provide this to the SIA.
Certain premises, including qualifying places of worship and education settings, are treated differently under the Act and may remain within the standard tier even where 800 or more people are expected. The official scope guidance should always be checked.
What about events?
An event may qualify where 800 or more people, including staff, are reasonably expected to be present, members of the public can access it and entry is controlled in some way—for example by a ticket, pass or security check.
Qualifying events are subject to enhanced-tier requirements, even when the premises hosting them would not otherwise fall within scope.
Does Martyn’s Law require CCTV or access control?
The Act does not prescribe a particular product or a single security solution for every venue. Requirements must be appropriate and reasonably practicable for each location, taking account of factors such as the premises, risk, cost, time and difficulty involved.
For some enhanced-tier premises, measures such as CCTV, access control, lockdown systems, public address or emergency communication systems may form part of a wider security plan. Technology should support suitable procedures, trained people and the specific needs of the site—it cannot guarantee compliance by itself.
Who will regulate Martyn’s Law?
The Security Industry Authority (SIA) will be the regulator. Its role will include providing support and guidance, receiving notifications and compliance documents, inspecting premises, investigating suspected non-compliance and taking enforcement action where necessary.
The SIA’s powers will begin when the relevant parts of the Act come into force.
How can organisations prepare?
If your premises or event is likely to be in scope, sensible early steps include:
- Identify the responsible person and any other parties who control the premises.
- Establish the greatest number of people, including staff, reasonably expected to be present at the same time.
- Review existing evacuation, invacuation, lockdown and communication procedures.
- Make sure relevant staff understand their roles and can carry out the procedures.
- For larger premises and events, review monitoring, movement, physical security and information security measures.
- Follow the latest Home Office, SIA and ProtectUK guidance as implementation progresses.
Be cautious of any organisation or product claiming to guarantee Martyn’s Law compliance. Compliance will depend on the individual premises or event and the final requirements in force.
How CIE can help
CIE can support installers, integrators and organisations with the design and specification of security and communication solutions suited to a site’s individual requirements. This may include access control, video surveillance, lockdown, public address, voice alarm and intercom systems.
Our team can help you explore the technology that may support a wider protective security plan. However, CIE does not provide legal advice or certify Martyn’s Law compliance.
Speak to the CIE team about your next security or communication project.
