Understanding Martyn's Law and Your Terrorism Protection Obligations

The Background to Martyn's Law

The Terrorism Protection of Premises Act 2025, widely known as Martyn's Law, represents the most significant development in UK protective security legislation for many years. Named in memory of Martyn Hett, one of the 22 people killed in the Manchester Arena attack in 2017, this legislation establishes new requirements for venue operators to consider and mitigate terrorism risks.

The Act follows years of campaigning by Figen Murray, Martyn's mother, who argued that many venues lacked basic protective security measures that could reduce casualties in the event of an attack. Her tireless advocacy brought terrorism protection to the forefront of public and political attention.

Who the Legislation Affects

The Act applies to qualifying public premises and events based on their capacity. Standard tier requirements apply to premises with a capacity between 200 and 799 people, while enhanced tier obligations affect larger venues with capacity of 800 or more.

Qualifying premises include entertainment venues, retail locations, sports grounds, places of worship, education establishments, and other locations where the public gather. Temporary events meeting the capacity thresholds also fall within scope.

Understanding whether your premises qualify requires careful analysis of how capacity is measured and which areas are included in the calculation. Security professionals and venue operators should seek clarity on their obligations to ensure compliance.

Standard Tier Requirements

Premises falling within the standard tier must implement procedures to reduce vulnerability to terrorism and the resulting harm. This includes training relevant workers to respond appropriately to terrorism incidents and establishing procedures for evacuation and invacuation.

The emphasis at this tier focuses on awareness and response capability rather than physical security measures. Staff should understand the current threat environment, recognise suspicious behaviour, and know how to act if an attack occurs.

Documentation of procedures and training records will likely form part of demonstrating compliance. Organisations should establish clear governance arrangements that assign responsibility for meeting these obligations.

Enhanced Tier Requirements

Larger venues face more extensive obligations under the enhanced tier. In addition to the standard tier requirements, these premises must conduct terrorism risk assessments, develop security plans, and implement reasonably practicable measures to reduce vulnerability and potential harm.

Risk assessments must consider the attractiveness of the venue to terrorists, potential attack methodologies, and the likely consequences of different attack scenarios. Security plans should then set out proportionate measures that address identified risks.

Physical security measures, access control, search procedures, and hostile reconnaissance detection may all feature in enhanced tier security plans. The specific measures required will depend on the nature of the venue and the risks identified through assessment.

Conducting Terrorism Risk Assessments

Effective terrorism risk assessments require structured methodology and appropriate expertise. Assessors must understand the current threat landscape, including the tactics and targets favoured by different terrorist actors, and apply this understanding to the specific context of the venue.

The assessment should examine how an attacker might approach the venue, what targets they might select, and how existing measures might detect or deter an attack. Crowded spaces, queuing areas, and points of congregation often represent particular vulnerabilities.

Scenario based analysis helps identify gaps in current arrangements and prioritise improvements. Security professionals should consider vehicle attacks, improvised explosive devices, firearms, and bladed weapons as potential methodologies.

Implementing Proportionate Measures

The legislation requires measures that are reasonably practicable, recognising that not every venue can implement airport style security. Proportionality depends on the level of risk, the effectiveness of potential measures, and the costs and operational impacts involved.

Smaller enhanced tier venues might focus on staff training, search procedures, and improved communication systems. Larger or higher profile venues may require more substantial investment in physical security, technology, and specialist personnel.

Whatever measures are implemented, they must form part of a coherent security plan rather than isolated initiatives. Integration with existing safety and security arrangements ensures efficiency and avoids conflicting procedures.

Regulatory Oversight and Enforcement

A new regulator will oversee compliance with the Act, with powers to inspect premises, require information, and take enforcement action against operators who fail to meet their obligations. Penalties for non compliance may include significant fines.

Venue operators should anticipate regulatory inspection and ensure they can demonstrate compliance through documentation, records, and evidence of implemented measures. Proactive engagement with the regulator may help address any issues before formal enforcement action becomes necessary.

Building Organisational Capability

Meeting the requirements of Martyn's Law demands security expertise that many organisations may not currently possess. Investing in professional development helps build internal capability to conduct assessments, develop plans, and implement effective measures.

The Certified Security Risk Manager programme provides comprehensive training in terrorism awareness and mitigation as part of its Module 6 curriculum. Participants learn to assess terrorism risks, design proportionate countermeasures, and engage with the protective security landscape.

Preparing for Compliance

Organisations should begin preparing now rather than waiting for enforcement to commence. Early action allows time to identify gaps, develop solutions, and embed new procedures before regulatory scrutiny intensifies.

Consider the CSRM qualification to develop the expertise needed to lead your organisation's response to Martyn's Law and the broader terrorism protection challenge. The programme equips security professionals with practical skills that translate directly into effective compliance.