Figen Murray OBE has been tirelessly campaigning for Martyn’s Law since her son Martyn Hett, along with 21 other innocent victims, was killed at the Manchester Arena terror attack in 2017.

The Terrorism (Protection of Premises) Act 2025, Martyn’s Law, requires publicly accessible premises and events to prepare for and reduce the risk of terrorist attacks.

The law is named in tribute to Martyn Hett, one of the victims of the 2017 Manchester Arena attack.

Implementation timeline

The Act got Royal Assent on 3 April 2025. The Act is law now, but it will not be enforced until spring 2027. There’s a 24 month implementation period first. This transition allows:

• the Security Industry Authority (SIA) to establish its regulatory function
• the Home Office to publish statutory guidance
• duty holders to plan and prepare for compliance

How it affects your business

Premises and events across the UK that are in scope should begin preparing now. Early action will:

• ensure smoother compliance when enforcement begins
• enhance public safety and reduce reputational risk
• align with good practice in counter-terrorism preparedness

What will be in scope

Martyn’s Law applies to publicly accessible premises and events that meet all these criteria:

• used for qualifying activities such as entertainment, retail, food and drink, worship, education
• have a capacity of 200 or more people
• are either permanent premises or temporary events with controlled access

How it will work

The Act introduces a two-tier system based on capacity.

Standard tier

The standard tier applies to premises with a capacity of 200 to 799 people. It applies to most premises such as:

• community centres
• small theatres
• independent cinemas
• medium-sized retail outlets

Those responsible for standard tier premises must:

• notify the Security Industry Authority (SIA) of their premises
• have in place, so far as reasonably practicable, appropriate public protection procedures.

These procedures should be followed by people working at the premises if an act of terrorism were to occur at the premises, or in the immediate vicinity. The requirements for standard duty premises are centred around simple, low-cost activities with costs relating primarily to time spent. There is no requirement to put in place physical security measures.

Requirements

Those responsible for standard tier premises must:

• register with the SIA
• develop basic public protection procedures (lockdown, invacuation, evacuation, communication)

No physical security infrastructure is mandated.

Enhanced tier

The enhanced tier applies to premises and events with a capacity of 800 or more people.

It applies to larger premises and events such as:

• stadiums
• large shopping centres
• major festivals

Additional requirements

Premises or events in the enhanced tier must comply with standard tier requirements. In addition, those responsible for enhanced tier premises or events must:

• conduct terrorism risk assessments
• implement physical security measures such as CCTV, access control
• maintain a simple security plan
• appoint a designated senior individual responsible for compliance

How to prepare

While enforcement is not yet active, premises should:

• maintain a simple security plan to present to the SIA
• identify which tier they fall into
• assess vulnerabilities and potential attack methods
• train staff and embed a security culture
• review communications and emergency response plans
• engage with Counter Terrorism Security Advisers for tailored support

Information, training and guidance

Action Counter Terrorism (ACT) offer free online training for staff visit: protectuk.police.uk/group/84

If your business wants to attend or host sessions with Counter Terrorism Security Advisers, contact ctsa.south@ctpne.police.uk.

Martyn’s Law Explainer Video protectuk.police.uk/news-views/watch-new-martyns-law-explainer-video