
Since the Terrorism (Protection of Premises) Act 2025 commonly known as Martyn’s Law received Royal Assent, organisations across the UK have been asking one simple question:
What do we actually need to do?
Whether you manage a public venue, organise events or are responsible for security and risk management, understanding your obligations now will help you prepare well before the legislation comes fully into force.
Below, we’ve answered the questions we hear most often from clients.
Martyn’s Law is the common name for the Terrorism (Protection of Premises) Act 2025.
Its purpose is to improve public safety by ensuring organisations that operate publicly accessible premises or events are better prepared to respond to a terrorist attack.
Rather than requiring expensive security measures, the legislation focuses on proportionate preparedness, planning and staff awareness. The Government expects an implementation period of at least 24 months after Royal Assent before legal duties begin to apply.
The legislation is named after Martyn Hett, one of the 22 people killed during the Manchester Arena attack in 2017. His mother, Figen Murray, campaigned for many years to improve protective security at public venues.
The legislation applies to organisations responsible for certain publicly accessible premises and qualifying events across the UK.
This includes many venues such as:
Whether your organisation falls within scope depends primarily on occupancy and the type of premises.
If your premises are publicly accessible and regularly accommodate 200 or more people, there is a good chance they could fall within scope.
The legislation introduces two tiers:
If you’re unsure, obtaining professional advice early can help avoid costly mistakes.
Organisations will need to:
Larger venues must do everything required under the Standard Tier and also:
The requirements are designed to be proportionate to the size and risk profile of the venue.
Although the Act received Royal Assent in April 2025, organisations have an implementation period before legal duties begin.
The Government has indicated this period will last at least 24 months, giving organisations time to understand the legislation, train staff and prepare.
Yes: One of the key principles behind Martyn’s Law is ensuring staff know what to do before, during and after a terrorist incident. Training should be proportionate to your organisation’s responsibilities and should form part of your wider emergency preparedness arrangements.
No: Martyn’s Law is about organisational preparedness, not simply employing security personnel. Reception staff, event teams, facilities managers, supervisors and senior leaders all have responsibilities depending on their role.
The Security Industry Authority (SIA) will regulate the legislation. Where organisations fail to meet their legal obligations, enforcement action may include:
Serious or persistent failures may result in further legal action.
Many smaller businesses will fall outside the legislation. However, every organisation can benefit from improving protective security, emergency planning and staff awareness. Good security practice remains valuable even where the Act does not legally apply.
Training should cover topics including:
The right course depends on your organisation’s size, responsibilities and level of risk.
Preparing for Martyn’s Law is about much more than ticking a compliance box.
At Ubique Risk Management, we help organisations build practical, proportionate security arrangements through:
Our approach focuses on helping organisations understand both the legislation and the practical steps needed to protect people.
If you’re unsure whether Martyn’s Law applies to your organisation, or you’re planning on implementation, our consultants can help you prepare with confidence.
You may also find these resources useful:

We use cookies to enable essential functionality on our website, and analyze website traffic. By clicking Accept you consent to our use of cookies. Read about how we use cookies.