Martyn's Law FAQ: Everything You Need to Know

Since the Terrorism (Protection of Premises) Act 2025 commonly known as Martyn’s Law received Royal Assent, organisations across the UK have been asking one simple question:

What do we actually need to do?

Whether you manage a public venue, organise events or are responsible for security and risk management, understanding your obligations now will help you prepare well before the legislation comes fully into force.

Below, we’ve answered the questions we hear most often from clients.

What is Martyn's Law?

Martyn’s Law is the common name for the Terrorism (Protection of Premises) Act 2025.

Its purpose is to improve public safety by ensuring organisations that operate publicly accessible premises or events are better prepared to respond to a terrorist attack.

Rather than requiring expensive security measures, the legislation focuses on proportionate preparedness, planning and staff awareness. The Government expects an implementation period of at least 24 months after Royal Assent before legal duties begin to apply.

Why is it called Martyn's Law?

The legislation is named after Martyn Hett, one of the 22 people killed during the Manchester Arena attack in 2017. His mother, Figen Murray, campaigned for many years to improve protective security at public venues.

Who does Martyn's Law apply to?

The legislation applies to organisations responsible for certain publicly accessible premises and qualifying events across the UK.

This includes many venues such as:

  • Entertainment venues
  • Shopping centres
  • Hotels
  • Sports grounds
  • Museums
  • Visitor attractions
  • Event venues
  • Conference centres
  • Healthcare settings
  • Universities
 

Whether your organisation falls within scope depends primarily on occupancy and the type of premises.

Does Martyn's Law apply to my business?

If your premises are publicly accessible and regularly accommodate 200 or more people, there is a good chance they could fall within scope.

The legislation introduces two tiers:

  • Standard Tier (200–799 people)
  • Enhanced Tier (800+ people)
 

If you’re unsure, obtaining professional advice early can help avoid costly mistakes.

What are the two tiers?

Standard Tier

Organisations will need to:

  • Have appropriate procedures
  • Train relevant staff
  • Prepare for responding to an attack

Enhanced Tier

Larger venues must do everything required under the Standard Tier and also:

  • Assess terrorist risks
  • Consider appropriate security measures
  • Maintain additional documentation
  • Demonstrate ongoing compliance
 

The requirements are designed to be proportionate to the size and risk profile of the venue.

When does Martyn's Law come into force?

Although the Act received Royal Assent in April 2025, organisations have an implementation period before legal duties begin.

The Government has indicated this period will last at least 24 months, giving organisations time to understand the legislation, train staff and prepare.

Will staff need training?

Yes: One of the key principles behind Martyn’s Law is ensuring staff know what to do before, during and after a terrorist incident. Training should be proportionate to your organisation’s responsibilities and should form part of your wider emergency preparedness arrangements.

Is Martyn's Law just about security guards?

No: Martyn’s Law is about organisational preparedness, not simply employing security personnel. Reception staff, event teams, facilities managers, supervisors and senior leaders all have responsibilities depending on their role.

What happens if an organisation doesn't comply?

The Security Industry Authority (SIA) will regulate the legislation. Where organisations fail to meet their legal obligations, enforcement action may include:

  • Compliance notices
  • Monetary penalties
  • Restriction notices
 

Serious or persistent failures may result in further legal action.

Do small businesses need to worry?

Many smaller businesses will fall outside the legislation. However, every organisation can benefit from improving protective security, emergency planning and staff awareness. Good security practice remains valuable even where the Act does not legally apply.

What training should organisations consider?

Training should cover topics including:

  • Counter-terrorism awareness
  • Protective security
  • Emergency response procedures
  • Incident management
  • Risk assessment
  • Business continuity
 

The right course depends on your organisation’s size, responsibilities and level of risk.

How can Ubique Risk Management help?

Preparing for Martyn’s Law is about much more than ticking a compliance box.

At Ubique Risk Management, we help organisations build practical, proportionate security arrangements through:

 

Our approach focuses on helping organisations understand both the legislation and the practical steps needed to protect people.

If you’re unsure whether Martyn’s Law applies to your organisation, or you’re planning on implementation, our consultants can help you prepare with confidence.

Further Reading

Work With a Trusted Counter-Terrorism Security Trainer

Secure your place on the Level 3 Award in Counter-Terrorism Protective Security and Preparedness course, where expert trainers bring decades of experience across counter-terrorism policing, protective security planning, crisis response and professional training.