Guidance

Martyn's Law: the SIA's new regulatory role

Published 7 April 2025

What is Martyn’s Law?

The Terrorism (Protection of Premises) Act, known as Martyn’s Law, will ensure the public is better protected from terrorism by requiring certain public premises and events to be prepared and ready to keep people safe in the event of an attack.

Certain larger premises will be required to consider and, where appropriate, take steps to reduce their vulnerability to acts of terrorism. A tiered approach is established under the new Act, with those responsible for premises and events in scope required to fulfil different requirements according to the number of individuals it is reasonable to expect may be present.

Smaller premises where 200 to 799 individuals may be present will be in the ‘standard tier’. The requirements in this tier are centred on simple, low-cost activities designed to ensure those working at premises or events are better able to reduce harm, and save lives, in the event of an attack.

These activities could be as simple as locking doors, closing shutters, and identifying safe routes to cover. There is no requirement to put in place physical measures in the standard tier.

Larger premises – and qualifying public events – where 800 or more individuals may be present will be in the ‘enhanced tier’.

In addition to the requirements for the standard tier, these larger premises and events will have further requirements placed upon them. This includes having in place, so far as is reasonably practicable, appropriate public protection measures to reduce their vulnerability to acts of terrorism and the risk of physical harm if an act of terrorism was to occur. Appropriate measures for enhanced duty premises and events could include bag search policies, CCTV, or other monitoring and vehicle checks.

Persons responsible for standard tier premises, that is qualifying premises where it is reasonable to expect that between 200 and 799 individuals may be present at the same time from time to time, will be required to:

• notify the regulator, the Security Industry Authority (SIA), that they are responsible for their premises
• have in place, so far as is reasonably practicable, appropriate public protection procedures that could be reasonably expected to reduce the risk of physical harm being caused to individuals if an attack was to occur there or nearby

Persons responsible for enhanced tier premises and qualifying events, that is qualifying premises and events where it is reasonable to expect more than 800 individuals to be present at the same time from time to time, will be required to:

• notify the SIA that they are responsible for the premises or event
• have in place, so far as is reasonably practicable, appropriate public protection procedures that could be expected to reduce the risk of physical harm being caused to individuals if an attack was to occur there or nearby
• have in place, so far as is reasonably practicable, appropriate measures that could reasonably be expected to reduce both the vulnerability of the premises or event to an act of terrorism occurring, and the risk of physical harm being caused to individuals if an attack was to occur there or nearby
• document the public protection procedures and measures in place, or proposed to be put in place, and provide this document to the SIA

For all premises and events, requirements relating to procedures and measures are subject to the concept of ‘reasonably practicable’. Reasonably practicable is a concept found in other regimes, such as fire safety and health and safety. In determining what is reasonably practicable, the responsible person will need to take into account their particular circumstances, including the nature of the premises and the resources available to them.

Ultimately, what is appropriate and reasonably practicable will be a consideration at each of the individual premises in scope. The particular procedures in place at one location may not be appropriate and reasonably practicable at another.

The Terrorism (Protection of Premises) Act requires the production of two separate pieces of statutory guidance, which are:

• guidance from the Home Office for the public to understand how they might meet the requirements of the legislation
• operational guidance from the SIA which will set out how the regulator will discharge its duties

What is the role of the regulator?

The legislation establishes the SIA as the regulator of Martyn’s Law. Implementation work has now begun. It is expected that establishing the new regulatory capability will take at least 24 months.

The role of the regulator is to provide advice on and ensure compliance with the regulatory requirements of the legislation, supporting those responsible for qualifying premises and events to meet their obligations and determine what reasonably practicable procedures and measures should be put in place.

The SIA is working closely with the Home Office on the preparation work for the new duty and its new role as the Martyn’s Law regulator. There will be joint outreach and engagement with stakeholders during this period as the preparation work progresses.

In the meantime, premises and events seeking to prepare for Martyn’s Law can access free technical guidance and operational advice on protective security on the National Protective Security Authority and ProtectUK websites.

Along with the Home Office and ProtectUK, the SIA does not endorse any third-party products or providers that claim to ensure a premises or location can comply with Martyn’s Law.

For more detailed information on Martyn’s Law and the role of the regulator please go to the Home Office factsheets about Martyn’s Law.