Martyn's Law is the informal name for the Terrorism (Protection of Premises) Act 2025, a UK law that places a legal duty on those responsible for certain public premises and events to take proportionate steps to reduce the risk of harm to the public from terrorism. It received Royal Assent on 3 April 2025 and is expected to come into force during 2027, with the Security Industry Authority (SIA) as the regulator.
Last reviewed: 8 July 2026
Why Is It Called Martyn's Law?
On 22 May 2017, a terrorist attack at the Manchester Arena killed 22 people. Among them was Martyn Hett, a 29-year-old from Rossendale. In the years that followed, his mother Figen Murray led a sustained public campaign calling for new legislation to ensure venues and events are better prepared for the threat of terrorism.
That campaign became known as Martyn's Law. The concept was initially referred to as the Protect Duty during early government consultation. The bill was formally introduced to Parliament as the Terrorism (Protection of Premises) Bill, received Royal Assent on 3 April 2025 as the Terrorism (Protection of Premises) Act 2025, and is expected to come into force during 2027.
The Two Tiers at a Glance
The Act divides qualifying premises and events into two tiers based on reasonably expected capacity. The tier determines the scope of the duty. For a detailed breakdown, see our Standard Tier vs Enhanced Tier guide.
| Feature | Standard Duty (200–799) | Enhanced Duty (800+) |
|---|---|---|
| Capacity threshold | 200–799 people | 800+ people |
| Staff awareness | Required | Required |
| Public protection procedures | Required (evacuation, invacuation, lockdown, communication) | Required (same, plus more) |
| Terrorism risk assessment | Not required | Required and documented |
| Public protection measures | Not required | Required (physical and procedural) |
| Written documentation | Simple written procedures | Full documented measures and risk assessment |
| Designated Senior Individual | Not required | Must be appointed |
| Inspection by regulator | Yes | Yes, with higher documentation standards |
Who Does Martyn's Law Apply To?
The Act applies to qualifying public premises and events that meet a reasonably expected capacity threshold of 200 or more people. This covers a wide range of venues — entertainment and sports venues, retail, hospitality, places of worship, visitor attractions, healthcare, and education settings — wherever the public has access.
Exemptions are limited and include private dwellings, agricultural land, and some military or Crown premises. Places of worship are not automatically exempt — their inclusion depends on whether they meet the capacity threshold.
What Are the 5 Key Requirements of Martyn's Law?
Every qualifying premises must meet these requirements. The scope increases for enhanced-tier premises (800+ capacity).
Awareness
Ensure relevant staff are aware of the threat from terrorism and what to do if an attack occurs. This is the baseline duty for all premises in scope.
Public Protection Procedures
Put in place and maintain procedures that could reduce the risk of harm to the public. These include evacuation, invacuation, lockdown, and communication plans.
Public Protection Measures (enhanced only)
For premises with a capacity of 800 or more, go beyond procedures and implement documented physical and procedural measures informed by a terrorism risk assessment.
Documentation
Keep written records of the procedures and measures in place. Enhanced-tier premises must maintain a full, inspectable document set.
Responsible Person
Identify the responsible person — the individual or organisation with control of the premises. Enhanced-tier premises must also appoint a designated senior individual accountable for compliance.
Key Dates and Current Status
The Act received Royal Assent on 3 April 2025. Its duties are not yet in force — an implementation period, expected to run until 2027, gives duty-holders time to prepare. The Security Industry Authority (SIA) is expected to be confirmed as the regulator.
Bill Introduced to Parliament
The Terrorism (Protection of Premises) Bill was introduced to Parliament, formally beginning the legislative process. The bill was also known as "Martyn's Law" in recognition of Figen Murray's campaign.
Royal Assent
The Terrorism (Protection of Premises) Act 2025 received Royal Assent on 3 April 2025. The Act became law, but its duties do not come into force immediately — an implementation period allows duty-holders time to prepare.
Implementation Period
The Act includes an implementation period — commonly cited as 24 months — before the duties come into force. The Security Industry Authority (SIA) is expected to be the regulator. The implementation date is expected to be in 2027, with April 2027 frequently cited.
What Organisations Need to Do
The implementation period is not a reason to wait — it is the time in which prepared organisations get ahead. Whether you need to understand your tier, check your sector's requirements, or plan staff training, these guides walk you through the specifics:
Understand the Tiers
Standard vs Enhanced — capacity thresholds, duties, and worked examples.
Staff Training Requirements
What training covers under each tier and the SIA's role.
Guidance for Schools
Capacity thresholds and compliance checklist for education settings.
Risk Assessment Template
A free checklist mapped to standard and enhanced tier duties.
Common Questions
What is Martyn's Law in the UK?
Martyn's Law is the informal name for the Terrorism (Protection of Premises) Act 2025, a UK law that places a legal duty on those responsible for certain public premises and events to take proportionate steps to reduce the risk of harm to the public from terrorism and to be better prepared to respond if an attack occurs. It received Royal Assent in April 2025 and is expected to come into force during 2027.
Why is it called Martyn's Law?
It is named in memory of Martyn Hett, one of 22 people killed in the Manchester Arena bombing on 22 May 2017. His mother, Figen Murray, led a sustained public campaign for new legislation to improve public protection preparedness at venues and events. The Act formally carries the name the Terrorism (Protection of Premises) Act 2025, but is widely known as Martyn's Law.
What is Martyn's Law now called?
The official name is the Terrorism (Protection of Premises) Act 2025. During its passage through Parliament it was known as the Terrorism (Protection of Premises) Bill, and informally as Martyn's Law or the Protect Duty. The Act received Royal Assent on 3 April 2025.
Is Martyn's Law mandatory?
Yes. The Terrorism (Protection of Premises) Act 2025 is a legal statute. Once the implementation period ends and the duties come into force, qualifying premises and events will be legally required to comply. The Security Industry Authority (SIA) is expected to act as the regulator, with powers of inspection and enforcement including penalties for non-compliance.
What are the 5 key requirements of Martyn's Law?
The five key requirements are: (1) staff awareness of terrorism threats; (2) public protection procedures — evacuation, invacuation, lockdown, and communication; (3) public protection measures for enhanced-tier premises (800+ capacity), including a documented terrorism risk assessment; (4) written documentation of all procedures and measures; and (5) identification of a responsible person, with enhanced-tier premises also required to appoint a designated senior individual accountable for compliance.
Who is exempt from Martyn's Law?
Exemptions are limited. Certain premises — such as private dwellings, agricultural land, and some military or Crown premises — fall outside the scope of the Act. Places of worship are not automatically exempt; whether a church, mosque, temple, or other religious venue is in scope depends on whether it meets the qualifying capacity threshold and whether the public has access. Detailed guidance on exemptions is available in the Home Office fact sheet.
Get Ready for Martyn's Law
The implementation window is finite. Hermes Digital offers an NPSA-aligned readiness assessment that determines your tier, identifies your gaps, and produces a prioritised action plan — so the duty is business-as-usual by the time it applies, not a last-minute scramble.