IMPORTANT NOTICE
Our main phone number has changed. Please use 01223 626547 until further notice.
Our out-of-hours number remains the same.
Thank you.

What Is Martyn's Law? 2025 Compliance Guide for UK Businesses

Martyn’s Law is another name for the Terrorism (Protection of Premises) Act 2025, which requires UK premises and events with 200+ capacity to implement security measures against terrorist attacks.

This new law is predicted to affect 178,900 venues, according to Local Government Lawyer, so the chances are that if you run a public venue that can hold over 200 people, Martyn’s Law will impact you. However, many businesses are leaving themselves vulnerable to reputational and financial damage because they underestimate their exposure to terrorism risk or lack the expertise to assess it correctly.

i2 Security & Fire Protection has over 30 years of experience guiding UK organisations through evolving security legislation and compliance challenges. Our team understands the practical steps required to comply with Martyn’s Law. From terrorism risk assessments to staff training and physical security upgrades, we will help you avoid costly mistakes and protect your people and reputation.

In this blog post, we break down the Martyn’s Law requirements, dispel common myths, and give you a clear action plan so you can confidently move forward.

Court building and confused woman with question marks, illustrating uncertainty about Martyn's Law 2025 compliance requirements for UK businesses.

The Story Behind Martyn's Law: From Tragedy to Legislation

Martyn Hett was killed in the Manchester Arena bombing on 22nd May 2017. The attack, which targeted concertgoers as they left an Ariana Grande show, killed 22 people and injured hundreds more. The incident exposed serious gaps in venue security, especially at entry and exit points where crowds gathered without proper protection.

Martyn’s mother, Figen Murray, channelled her grief into action and launched a campaign to improve public safety. 

Royal Assent and Implementation Timeline

Figen Murray’s campaign led to Martyn’s Law receiving Royal Assent on 3rd April 2025.

The Home Office has set an implementation period of at least 24 months to allow the Security Industry Authority to establish its new regulatory function. This timeline also gives organisations time to understand their new duties, plan how to comply, and put new security measures in place.

Do not wait until the law is enforced to act. The government will publish detailed rules over the next two years, and you must follow them when the law comes into force. If you start reviewing your security, training your staff, and updating your procedures now, you will be ready when the law applies.

If you leave preparation until the last minute, you risk missing key steps or facing penalties for being unprepared.

The Security Industry Authority's Role as Regulator

The Security Industry Authority (SIA) will regulate Martyn’s Law. The SIA can inspect venues, collect information, and issue compliance or restriction notices.

The SIA will publish statutory guidance and set standards during the implementation period to keep security standards consistent across the UK.

Geographic Scope

The geographic scope of Martyn’s Law applies across England, Wales, Scotland, and Northern Ireland. This means every part of the UK will follow the same security standards for public venues and events to make sure everyone is equally protected from terrorist threats.

Terrorism does not respect borders, so having one law for England, Wales, Scotland, and Northern Ireland helps prevent gaps in safety. Local councils, police, and emergency services will all work together using this law to help businesses meet their new security duties.

While threat levels may differ in each region, Martyn’s Law sets a clear, consistent baseline for security at all premises and qualifying events across the UK.

Which Premises and Qualifying Events Are Affected by Martyn's Law?

Martyn’s Law applies to qualifying premises and events in the UK where 200 or more people are expected at the same time.

If you own, manage, or operate a building or land used for retail, hospitality, entertainment, leisure, sports, education, healthcare, worship, or public services (and you meet the capacity threshold), your premises or event are likely in scope.

Who Must Comply?

To work out whether or not you need to comply with Martyn’s Law, you first need to establish if you are responsible for premises and events that fall into one of the following three categories (standard tier, enhanced tier or qualifying event).

Standard Tier

If your premises can hold between 200 and 799 people at any one time, you fall under the standard tier, and you must do the following:

  • Register your premises with the regulator.
  • Appoint someone responsible for compliance.
  • Assess the threat of terrorism and possible attack methods.
  • Put public protection procedures and measures in place, covering evacuation, lockdown, invacuation, and communication.
  • Train staff so they know what to do in an emergency.
  • Review and update your procedures regularly to keep them effective.

 

Enhanced Tier

If your premises can hold 800 or more people at once, you fall under the enhanced tier. You must meet all standard tier duties and also the following:

  • Carry out a detailed terror threat assessment to identify specific vulnerabilities.
  • Develop and maintain a written security plan explaining how to manage and reduce risks.
  • Put in place protective security measures (as far as is reasonably practicable), such as CCTV, access controls, bag searches, and perimeter security.
  • Assign clear security roles to staff, including those responsible for enhanced tier compliance, and work closely with emergency services.
  • Run regular drills and practical exercises to make sure everyone is prepared.

 

Qualifying Events

A qualifying event is a one-off or temporary event (not already at an enhanced tier venue) where you expect 800 or more people at once and control entry through tickets, passes, or membership.

If your event meets these criteria, you must follow the same requirements as enhanced tier premises.

Are There Exemptions?

Yes, some places are exempt from Martyn’s Law, including the following examples:

  • Parks, gardens, and open-air areas without entry controls.
  • Private homes and residential buildings.
  • Premises already covered by other security laws (airports, train stations, etc.).
  • Small community venues and village halls below the 200-person threshold.

How Do You Calculate Capacity?

To calculate capacity, you must count the total number of individuals who could be present at the same time (staff, customers, visitors, contractors, etc.).

Use fire safety limits, ticket sales, historic attendance, or licence restrictions to work out your maximum occupancy and review this regularly (especially if you host special events or your business grows).

If you need help getting started with Martyn’s Law, i2 Security & Fire Protection has the expertise to help you become compliant well before the deadline.

How i2 Can Help You Achieve Martyn's Law Compliance

i2 Security & Fire Protection has over 30 years of experience in all aspects of security needed to achieve Martyn’s Law compliance.

Our expert team of professionals can help you with the following areas of venue security compliance relevant to Martyn’s Law.

Intelligent Surveillance Systems

i2 Security & Fire Protection installs and maintains intelligent surveillance systems that meet enhanced tier requirements for continuously monitoring high-risk zones like entry points, perimeters, and crowd areas.

Our systems use AI to detect abandoned bags, unauthorised vehicles, or unusual crowd behaviour and trigger real-time alerts to onsite security teams.

High-definition cameras provide forensic-grade evidence for post-incident investigations while maintaining GDPR-compliant data retention policies.

Access Control Solutions

We install biometric and card-based access control entry systems that restrict unauthorised access to sensitive areas and produce detailed logs of all entry attempts for compliance audits.

Integrated visitor management platforms pre-screen guests against watchlists and issue temporary access credentials aligned with event schedules.

Emergency lockdown protocols can secure entire premises within seconds via centralised control panels or mobile apps.

Perimeter and Internal Security

i2 installs and maintains perimeter security systems using seismic sensors, thermal cameras, and pet-immune motion detectors to identify threats before they reach buildings.

Tamper-proof intruder alarms connect directly to 24/7 monitoring centres, while zone-specific alerts give rapid, targeted responses to any breach.

Internal detection systems protect high-risk areas such as server rooms, storage, and main corridors to guarantee that no vulnerable point goes unmonitored.

All i2 Security & Fire Protection systems integrate with your wider security infrastructure to support coordinated emergency action and help you prepare your business for Martyn’s Law compliance.

Preparing Your Business for Martyn's Law Compliance

Martyn’s Law sets clear security standards for UK businesses and public venues. It requires you to assess risks, plan responses, train staff, and work closely with local authorities to reduce the risk of physical harm being caused to individuals if an attack were to occur.

Conducting a Security Risk Assessment

A thorough security risk assessment identifies the specific vulnerabilities and threats facing your premises and operations.

Our professional assessors examine your building layout, daily routines, local risks, and current security measures, and ProtectUK offers structured guidance for terrorist risk assessments.

You should update your assessment regularly to reflect changes in threats or business activities. Keep clear records of your assessments to demonstrate compliance and support insurance or regulatory requirements.

Developing Emergency Response Plans

Your emergency response plan must set out clear actions for different threat scenarios. It should include evacuation routes, lockdown procedures, staff communication methods, and coordination with emergency services.

Review and update your plan after training exercises or real incidents to stay relevant. Involve your staff in the planning process so your procedures are practical and realistic, and link your emergency plan with existing health and safety policies for a joined-up approach.

Staff Training and Awareness Programmes

You must train all staff so they know their roles during a security incident and can follow your emergency procedures.

ACT Awareness e-Learning provides free, nationally recognised counter-terrorism training on threat recognition and response.

Provide role-specific training for managers, security staff, and general employees. Run regular refresher sessions to keep everyone up to date with the latest threats and procedures.

See, Check and Notify (SCaN) training helps staff spot suspicious behaviour and respond appropriately. See the YouTube video below for more details on this.

Working with Local Authorities and Police

Meet with your local police and emergency services to make sure your plans match their expectations and local threat levels. Counter-terrorism officers can advise on risks and suitable security measures for your location and sector.

Test your communication protocols with emergency services to ensure they work in practice.

Set up information-sharing agreements to receive relevant threat intelligence while protecting your business’s sensitive information, and hold regular meetings to review and improve your arrangements as circumstances change.

Creating a Culture of Security Awareness

Promote security awareness so every staff member understands their role in keeping your premises safe, without causing unnecessary anxiety.

Reinforce key messages through regular updates and briefings, and recognise and reward staff who contribute to security and incident prevention.

Make security part of your company culture, not an extra burden, by encouraging staff to suggest improvements and report concerns in a supportive environment.

Budget Planning for Compliance Measures

Plan your budget to cover the initial compliance costs and the expenses of ongoing security measures. Consider a phased approach to spread costs and meet deadlines. Use cost-benefit analysis to show how security investments can lower insurance premiums, boost customer confidence, and improve business continuity.

Seek professional advice from trusted experts such as i2 Security & Fire Protection to ensure your spending targets the most effective measures for your risk profile. We can even help you check for grants or funding to assist small businesses with security upgrades.

The Cost of Non-Compliance vs Investment in Security

Failing to comply with Martyn’s Law puts your business at risk of severe financial penalties, reputational harm, and even loss of insurance cover. The law sets clear expectations for security at public venues and events, and the consequences for ignoring these duties are significant.

By investing in professional security measures installed and maintained by i2, you not only avoid fines and legal action but also protect your reputation, strengthen business continuity, and unlock long-term operational benefits.

Financial and Legal Consequences

Non-compliance with Martyn’s Law can result in heavy fines (up to £10,000 per breach for standard tier premises, and up to £18 million or 5% of global revenue for enhanced tier sites and qualifying events).

The SIA enforces these penalties using compliance notices, restriction orders, and criminal prosecution for persistent breaches.

Daily penalties may also apply, reaching up to £500 per day for standard tier and £50,000 per day for enhanced tier premises.

Business Reputation, Insurance, and Operational Impact

A security incident at a non-compliant venue can cause lasting reputational damage, as news coverage often focuses on organisational failings and erodes public trust.

Legal claims for injuries or losses due to inadequate security can result in expensive compensation payouts and further negative publicity.

Business operations may be disrupted by forced closures or lengthy investigations that reduce revenue and harm staff morale.

Insurance providers increasingly require proof of security compliance, and if you cannot demonstrate this, your insurer may refuse claims or void your policy. Failing to meet legal standards can also affect your eligibility for public liability or professional indemnity insurance, exposing your business to greater financial risk. Some insurers offer lower premiums for businesses with strong security measures and up-to-date risk assessments.

The Value and Return of Security Investment

Effective security systems can lower insurance premiums, improve operational efficiency, and reassure customers and staff. Security upgrades help prevent terrorism, theft, vandalism, and other crimes. Staff feel safer and work better in secure environments, while property values and rental yields often rise when strong security is in place.

Modern security systems adapt to new threats and business needs. Integrated platforms provide valuable analytics for better decision-making and can support other business functions such as staff management and customer service. Future-proofed solutions help you respond quickly to regulatory changes or new technology and reduce the risk of expensive overhauls.

By taking this legislation seriously and investing in security now, you create a safer environment for everyone visiting or working at your premises and avoid falling for some of the myths and misconceptions about Martyn’s Law.

Common Myths and Misconceptions About Martyn's Law

Many businesses misunderstand their obligations under Martyn’s Law, leading to either unnecessary worry or dangerous complacency. The law applies based on capacity, not business size, and requires ongoing commitment rather than one-time fixes.

Below, we address the five most common myths about Martyn’s Law and explain what you really need to know. Understanding these misconceptions will help you focus your resources on effective compliance measures without wasting time or money.

  • Small Businesses Are Exempt: NO! Martyn’s Law applies to any premises where 200+ people may gather, regardless of business size.
  • Basic Training Is Sufficient: NO! Minimum training meets legal requirements but does not ensure staff are fully prepared for all security threats.
  • DIY Security Solutions Are Adequate: NO! Professional-grade systems and installation are usually required to meet compliance and insurance standards.
  • Compliance Is a One-Time Activity: NO! Ongoing assessments, training, and system updates are necessary to maintain compliance as risks and regulations change.
  • Compliance Will Cost a Fortune: NO! Standard tier compliance focuses on low-cost procedural measures, and phased implementation or grants can help manage expenses.

Frequently Asked Questions

What is Martyn's Law NHS?

Martyn’s Law requires NHS trusts to implement tiered security measures based on hospital capacity. NHS bodies must appoint a Designated Senior Individual (DSI) to oversee terrorism risk assessments, staff training on evacuation/invacuation protocols, and coordination with local counter-terrorism advisors.

What does Martyn's Law mean for schools?

Martyn’s Law places all schools in the standard tier and mandates integrated lockdown procedures like securing classroom doors during attacks.

What does Martyn's Law mean for places of worship?

Places of worship with 200+ attendees must implement standard tier measures. Enhanced tier exemptions apply regardless of capacity, but venues must still train volunteers in lockdown procedures and coordinate emergency drills with local police.

How does Martyn's Law work for leased premises?

For leased premises, you must work with the property owner to meet the legal requirements of Martyn’s Law. You should agree with the landlord on who is responsible for security measures, staff training, and emergency plans. Keep records of what you have agreed and make sure all parties understand their duties.

What are the requirements for multi-site organisations and franchise operations?

Martyn’s Law requires multi-site organisations and franchise operations to assess terrorism risks at each location. Each site must have its own risk assessment, security measures, and trained staff. Head offices should set clear policies and support local teams, but each site manager is responsible for following the law day-to-day. Franchisees must work with franchisors to make sure all sites meet the requirements and keep records of compliance.

What cybersecurity requirements apply to Martyn's Law compliance?

Any security systems you install for Martyn’s Law must meet basic cybersecurity standards. You must protect your systems from hacking and unauthorised access. This means using strong passwords, updating software, and controlling who can access security data.

What are standard duty premises?

Standard duty premises are any premises that have to conform to the procedures and measures set out by the standard tier of Martyn’s Law. 

What are enhanced duty premises?

Enhanced duty premises are any premises that have to conform to the procedures and measures set out by the enhanced tier of Martyn’s Law.

Is Protect Duty the same as Martyn's Law?

Yes, Protect Duty and Martyn’s Law refer to the same legislation. Protect Duty was the working title used by the UK government during consultations and drafting. Martyn’s Law is the popular name widely used by campaigners and the public. The official name of the legislation is the Terrorism (Protection of Premises) Act 2025.

Final Thoughts

Martyn’s Law is a significant shift in UK public safety legislation and requires UK businesses to take proactive steps to protect people from acts of terrorism. Understanding your UK venue compliance obligations under the Terrorism (Protection of Premises) Act 2025 is essential for compliance and public safety.

Professional guidance will help you implement appropriate measures efficiently while managing costs and operational impacts in line with British security legislation. As security experts serving UK businesses for over 30 years, i2 Security & Fire Protection will provide the knowledge and solutions needed to achieve compliance while increasing your overall security.

Don’t navigate Martyn’s Law compliance alone. Contact us today for a free consultation and site assessment. We’ll help you understand your specific obligations and develop a cost-effective compliance strategy tailored to your business needs.