Martyn’s Law and the New Era of UK Premises Security: What Commercial Venues and Facilities Managers Must Know
The UK’s protective-security landscape is changing. The Terrorism (Protection of Premises) Act 2025—widely known as Martyn’s Law—received Royal Assent on 3 April 2025 and establishes new duties for certain publicly accessible premises and events.
The legislation is expected to come into force in 2027 following an implementation period. This gives businesses time to establish whether they are in scope, understand their responsibilities and strengthen their operational readiness. Waiting until commencement, however, risks rushed procedures, unclear responsibilities and avoidable security gaps.
What Does Martyn’s Law Require?
Martyn’s Law is intended to improve preparedness for terrorist attacks and reduce the risk of physical harm. Its requirements are proportionate to the number of people reasonably expected to be present at the same time—including employees.
The “responsible person” will generally be the individual or organisation controlling the premises for its relevant use. Businesses should confirm this responsibility rather than assume it automatically belongs to the building owner, tenant or event organiser.
Standard Tier: 200–799 People
Premises where between 200 and 799 people may reasonably be expected at the same time, from time to time, will generally fall within the Standard Tier.
The responsible person must:
- Notify the Security Industry Authority, which will regulate the legislation.
- Establish appropriate public-protection procedures, so far as reasonably practicable.
- Ensure relevant workers understand those procedures and can implement them effectively.
The four procedures identified by the Act are evacuation, invacuation, lockdown and communication.
Importantly, Standard Tier premises are not automatically required to install physical security measures or employ security guards. The legal emphasis is on proportionate, workable procedures—not expensive equipment or unnecessary complexity.
Enhanced Tier: 800 or More People
Premises that can reasonably expect 800 or more people at the same time, from time to time, will generally fall within the Enhanced Tier. Qualifying public events expecting at least 800 people may also be included when the Act’s other conditions are met.
Enhanced Tier organisations must meet the Standard Tier requirements and, so far as reasonably practicable:
- Implement measures that reduce vulnerability and potential physical harm.
- Document their public-protection procedures and measures.
- Submit the required documentation to the SIA.
- Designate a senior individual to oversee compliance where the responsible person is an organisation.
Relevant measures may include monitoring, CCTV, searches, security patrols, controlled entry, screening, zoned access and physical protection.
Why a Trained Physical Security Presence Matters
Martyn’s Law does not prescribe manned guarding for every premises. Nevertheless, trained security personnel can make protective procedures operational rather than theoretical.
During an emergency, SIA-licensed security officers can help:
- Direct evacuation routes and keep exits clear.
- Support invacuation by moving people away from external danger.
- Implement lockdown procedures and control entry points.
- Communicate instructions to employees, visitors and contractors.
- Monitor CCTV and identify suspicious activity or unattended items.
- Manage crowds, preserve emergency access and assist responding services.
- Record incidents and support post-event reviews.
A security plan is only effective if people understand who makes decisions, how warnings are communicated and what happens when normal access arrangements must change immediately.
Facilities managers should also distinguish between the SIA’s role as the regulator of Martyn’s Law and the licensing of individuals undertaking licensable private-security activities. They are related parts of the security landscape, but they are not the same legal requirement.
Practical Steps for Auditing Your Premises
1. Establish Your Likely Tier
Assess the greatest number of people reasonably expected to be present simultaneously—not simply an average daily attendance. Include employees and consider predictable seasonal or event-related peaks.
2. Confirm Responsibility
Identify the responsible person and document how duties are divided between landlords, occupiers, managing agents, contractors and event organisers.
3. Review the Four Core Procedures
Test evacuation, invacuation, lockdown and communication arrangements. Procedures should address different threats, accessible evacuation requirements, vulnerable visitors and loss of normal communication systems.
4. Audit Access and Detection
Review entrances, exits, delivery points, contractor controls, keys, passes, visitor records, CCTV coverage, lighting and out-of-hours arrangements. Enhanced Tier sites should assess whether their protective measures are proportionate to their vulnerabilities.
5. Train, Exercise and Record
Brief employees, security officers and relevant contractors. Run practical exercises, record lessons and update procedures when layouts, occupancies or operations change.
Prepare Your Premises Before the Deadline
Security Guards UK provides nationwide, 24/7 SIA-licensed manned guarding, mobile patrols, CCTV monitoring, access control and rapid deployment—with officers available on-site within hours, subject to location and operational availability.
Book a premises security assessment or speak with our 24/7 operations team.
Call 0800 028 1513
Email info@securityguardsuk.com
Visit securityguardsuk.com
This article provides general security information and is not legal advice. Organisations should consult the latest Home Office and SIA guidance when determining their statutory responsibilities.