
Martyn's Law is one of the most significant changes to UK security legislation in recent years.
Officially known as the Terrorism (Protection of Premises) Act 2025, the legislation is designed to improve public safety by helping organisations prepare for, and respond to, terrorist incidents.
It introduces new legal duties for certain premises and events, placing a greater emphasis on preparedness, planning, and protective security.
Although the Act isn’t expected to come into force until at least Spring 2027, organisations across the UK are already beginning to assess what it means for their venues, events and operations.
In this guide, we'll explain what Martyn's Law is, who it applies to, what organisations need to do, and how security partners can help support preparations.
What is Martyn's Law?
Martyn's Law is the widely used name for the Terrorism (Protection of Premises) Act 2025.
The legislation was introduced following the Manchester Arena terrorist attack in 2017. The attack, the findings of the subsequent public inquiry, and the campaigning efforts of Figen Murray and others helped drive calls for stronger protective security requirements across publicly accessible locations.
The Act is named after Martyn Hett, one of those killed in the attack, and reflects the campaigning efforts of his mother, Figen Murray, who worked to improve protective security standards across publicly accessible locations.
The purpose of Martyn's Law is straightforward: organisations responsible for publicly accessible premises and events should think ahead about how they would respond to a terrorist attack and take reasonable, proportionate steps to protect people.
Why Was Martyn's Law Introduced?
The Manchester Arena Inquiry identified several lessons around preparedness, communication, security planning, and emergency response.
Martyn's Law seeks to strengthen security standards across publicly accessible locations by ensuring organisations consider:
- How they would respond to a terrorist incident
- Whether existing security arrangements are appropriate
- How staff would communicate and react during an emergency
- What measures could help reduce the risk of harm to the public
The overarching aim is to improve public protection through better planning, awareness, and preparedness.
Does Martyn's Law Apply to My Organisation?
One of the most common questions organisations ask is whether they fall within scope.
The legislation applies to certain publicly accessible premises and qualifying public events that meet specific criteria.
Examples of premises that may be affected include:
- Retail premises
- Hospitality venues
- Hotels
- Visitor attractions
- Sports venues
- Entertainment and leisure facilities
- Museums and galleries
- Healthcare settings
- Educational establishments
- Transport hubs
- Places of worship
These categories are identified within the Act and supporting guidance.
How Do Events Fit into Martyn's Law?
Events are treated differently from premises.
In general, qualifying events are public events where access is controlled through measures such as tickets, passes, registration or payment, and where attendance thresholds are met.
This means organisers of festivals, sporting events, exhibitions, conferences, and large public gatherings may need to assess whether their events fall within scope and what duties apply.
Understanding the Two-Tier System
Martyn's Law uses a tiered approach based on the number of people reasonably expected to be present.
Standard Tier Premises
The standard tier generally applies to premises where 200 to 799 people may reasonably be expected to be present at the same time.
Organisations are expected to have appropriate public protection procedures in place covering how people would respond during an incident. This includes:
- Evacuation
- Invacuation
- Lockdown
- Communication arrangements
Enhanced Tier Premises and Events
The enhanced tier generally applies to premises and qualifying events involving 800 or more people.
In addition to the standard duties, organisations may need to consider:
- Terrorism risk assessment
- Security planning
- Documentation and record keeping
- Protective security measures
- Formal governance arrangements
The important point is that
Martyn's Law is intended to be proportionate.
The legislation recognises that security arrangements should reflect the size, nature and circumstances of each site or event.
What Are Public Protection Measures and Public Protection Procedures?
These two concepts sit at the heart of Martyn's Law.
Public Protection Measures
Public protection measures are the security arrangements designed to help reduce vulnerability and protect people.
Examples may include:
- Access control
- CCTV systems
- Security personnel
- Search procedures
- Physical security enhancements
- Monitoring arrangements
Public Protection Procedures
Public protection procedures focus on how organisations would respond if an incident occurred.
Examples include:
- Evacuation plans
- Invacuation procedures
- Lockdown procedures
- Emergency communications
- Incident response arrangements
- Staff actions during a security incident
For many organisations, compliance may involve strengthening existing arrangements rather than introducing entirely new
security systems.
Who is the Responsible Person Under Martyn's Law?
Another key concept within the legislation is the responsible person.
The responsible person is the individual or organisation that has operational control of the premises or event and is therefore responsible for meeting the legal duties set out in Martyn's Law.
For example:
- A hotel operator may be the responsible person for a hotel.
- A venue operator may be the responsible person for a theatre.
- An event organiser may be the responsible person for a qualifying event.
More complex environments such as shopping centres or multi-occupancy sites may require a closer assessment of operational control arrangements.
Can Security Providers Take Responsibility for Compliance?
No, the legislation makes clear that organisations can’t transfer their legal responsibilities to a security provider.
A security partner can provide advice and support with:
- Training
- Planning
- Risk assessments
- Security personnel
- Operational expertise
However, responsibility for compliance remains with the responsible person.
This is an important distinction for organisations beginning their Martyn's Law journey.
A good security partner can help identify practical improvements and support preparedness, but the legal duty remains with the organisation responsible for the premises or event.
What Should Organisations Be Doing Now?
While many of the finer details will continue to evolve through guidance and implementation planning, there are practical steps organisations can take today.
These include:
- Reviewing current security arrangements
- Assessing incident response procedures
- Reviewing evacuation and lockdown plans
- Identifying potential vulnerabilities
- Considering staff awareness and training requirements
- Testing communication arrangements
- Reviewing event security planning processes
The organisations best positioned for Martyn's Law are those already reviewing their arrangements and considering how the legislation may apply to their premises or events.
Preparing for Martyn's Law
Martyn's Law represents a significant step forward in how the UK approaches protective security and public safety.
The legislation isn’t about creating unnecessary barriers or turning every venue into a high-security environment. It's about ensuring organisations are prepared, understand their responsibilities, and have reasonably practicable measures in place to help protect people.
With enactment approaching, now is the time to begin reviewing your arrangements, understanding the requirements, and identifying where improvements may be needed.
Need Support Navigating Martyn's Law?
Whether you're responsible for a venue, public attraction, workplace, hospitality site or event, understanding Martyn's Law can feel complex, particularly if you're still assessing whether the legislation may apply to your organisation.
SecuriGroup can help you review your current security arrangements, identify practical improvements, strengthen preparedness measures, and support your wider protective security planning.
Get in touch with our team to discuss Martyn's Law readiness and how we can help your organisation prepare with confidence.
Recent Posts


SecuriGroup and Down’s Syndrome Scotland break barriers at one of Scotland's biggest sporting events
















