Martyn's Law is the common name for the Terrorism (Protection of Premises) Act 2025. It creates a new legal duty for many publicly accessible premises and events in the UK to be better prepared to keep people safe in the event of a terrorist attack.
It is named in memory of Martyn Hett, one of the 22 people killed in the Manchester Arena attack in May 2017, and follows years of campaigning by his mother, Figen Murray. This guide explains what the law is, who it applies to, and what being prepared actually means — in plain English, without the jargon.
- · Full name: Terrorism (Protection of Premises) Act 2025.
- · Royal Assent: 3 April 2025. Statutory guidance published: April 2026.
- · Enforcement expected in spring 2027 — there is an implementation period to prepare.
- · Regulator: the Security Industry Authority (SIA).
- · Two tiers by capacity: standard (200–799) and enhanced (800+).
Why does Martyn's Law exist?
The aim is simple: to make sure that the places where the public gathers have thought about, and prepared for, the possibility of a terrorist attack — so that staff know what to do and more lives can be saved. It does not assume any premises is a target; it asks that reasonable, proportionate preparation is in place.
Crucially, for most premises this is about people and procedures, not expensive equipment. The Home Office has been clear that the lighter, standard-tier duties are intended to be low-cost and achievable without specialist help.
Who does it apply to?
A premises is in scope if it is a building (or several), is used for one of 17 qualifying activities (shops, food and drink, entertainment and leisure, sports grounds, libraries and museums, halls, visitor attractions, hotels, places of worship, healthcare, transport stations, education, childcare and more), is open to the public, and 200 or more people may be present at the same time.
That headcount includes staff and volunteers, and it counts your busiest realistic moment — so a venue that is quiet most of the time can still be in scope because of an occasional large event. Offices that aren't open to the public, and private homes, are not in scope.
The two tiers
The law splits in-scope premises into two tiers based on how many people can be present at once:
- ›Standard tier (200–799 people): notify the regulator and put in place simple public protection procedures — and make sure staff know them, or they won't work when needed. No requirement to spend on physical security.
- ›Enhanced tier (800+ people): everything in the standard tier, plus public protection measures to reduce vulnerability, and a documented assessment.
When does it start?
The Act received Royal Assent in April 2025 and the official statutory guidance was published in April 2026. The government set an implementation period of at least two years from Royal Assent, so enforcement is expected in spring 2027. That gap is deliberate — it gives the regulator time to set up and gives duty-holders time to prepare. The sensible move is to do the (mostly procedural) groundwork now, and review it before commencement.
What should you actually do?
If you're likely in the standard tier, the practical steps are: confirm and record whether you're in scope; identify the responsible person; agree your four public protection procedures (evacuation, invacuation, lockdown, communication); brief your staff and volunteers and keep a record of it; and set a date to review it. None of this requires a consultant — it requires getting it done and being able to show it.
Common questions
Is Martyn's Law in force yet?
Not yet. The Act is law, but the duties are not enforced until commencement, which is expected in spring 2027. Use the implementation period to prepare.
Does it apply to small venues?
It applies to publicly accessible, qualifying premises where 200 or more people (including staff) may be present at the same time — including occasionally. Many village halls, churches, pubs and small venues fall into the standard tier.
Will it cost a lot to comply?
For the standard tier, the duties are procedural and intended to be low-cost — about time rather than money. The enhanced tier (800+) involves more.
See where your premises stands
A two-minute scope check gives you a clear in/out decision to keep on record.
Check my premises