Martyn’s Law, formally known as The Terrorism (Protection of Premises) Act 2025, received Royal Assent on 3 April 2025. It is named after Martyn Hett, a victim of the tragic Manchester Arena bombing in 2017. The legislation, once it comes into effect in the UK in the next 24 months from the date of Royal Assent (i.e.by April 2027), aims to improve public safety by requiring those in control of certain venues to take proactive steps to mitigate the risk of terrorist attacks at public events.
Key Features of Martyn’s Law
Martyn’s Law will apply to businesses in control of venues holding public events with a capacity of 100 or more people, which includes a wide range of entertainment venues such as pubs, restaurants, cinemas, theatres, and sports stadiums. It also extends to public events like festivals and charity fundraisers.
Once this becomes law in April 2027 at the earliest, affected businesses must assess potential terrorist threats and implement appropriate security measures to protect the public. This includes developing robust response plans and improving physical security features, such as CCTV systems and trained security personnel.
The Security Industry Authority (SIA) will play a vital role in regulating security staff at these venues. Ensuring that security personnel are licensed and properly trained is essential for compliance with the law.
Regulatory requirements: a tiered approach
Smaller premises where 200-799 individuals may be present will be in the ‘standard tier.’ The requirements in this tier are centred on more simple measures designed to ensure those working at premises or events are better able to reduce harm, and save lives, in the event of an attack.
These could be achieved for example by locking doors, closing shutters and identifying safe routes to cover. There is no requirement to put in place physical measures in the standard tier.
Persons responsible for standard tier premises, i.e. qualifying premises where it is reasonable to expect that between 200 and 799 individuals may be present at the same time from time to time, will be required to:
1. notify the regulator, the Security Industry Authority (SIA), that they are responsible for their premises; and
2. have in place, as far as reasonably practicable, appropriate public protection procedures that could be reasonably expected to reduce the risk of physical harm being caused to individuals if an attack were to occur there or nearby.
Larger premises and qualifying public events where 800 or more individuals may be present will be in the ‘enhanced tier.’
3. In addition to the requirements for the standard tier, these larger premises and events will have further requirements placed upon them. This includes having in place, as far as is reasonably possible, appropriate public protection measures to reduce their vulnerability to acts of terrorism and the risk of physical harm if one were to occur.
4. For example, appropriate measures for enhanced duty premises and events could include bag search policies, CCTV or other monitoring and vehicle checks.
Further guidance
The Government has published a Martyn's Law Factsheet setting out the key responsibilities under the new legislation. For affected businesses, public liability insurance premiums may be positively or negatively affected depending on how well the business demonstrates compliance with the new requirements once these become law. See the blog by FSB Insurance Service for details.