Policy paper

Terrorism (Protection of Premises) Act 2025: Overarching Factsheet

Updated 21 July 2026

This was published under the 2024 to 2026 Starmer Labour government

What does the Act do?

The Terrorism (Protection of Premises) Act 2025 ^{[footnote 1]}, commonly referred to as Martyn’s Law, is intended to improve protective security and organisational preparedness across the UK.

The Act requires those responsible for certain premises and events to take steps to mitigate the impact of a terrorist attack and reduce harm in the event of a terrorist attack occurring. In addition to this, certain larger premises and events must also take steps to reduce their vulnerability to terrorist attacks.

Ensure consistency of approach and clarity of responsibility

Whilst some premises and events proactively consider the risk posed by acts of terrorism, there is no consistency across the UK. Historically counter-terrorism protective security and preparedness have often fallen behind other legally required activities, such as Health and Safety.

The Act places public protection on a legal footing like other regimes, to address such inconsistency, whilst making it clear who is responsible at qualifying premises and events, and what they are required to do.  

Striking the right balance

Those responsible for certain premises and events must take appropriate action to reduce the risk of harm to their workers and the public. To ensure a proportionate approach, it is expected that procedures and measures that are reasonably practicable are in place.

The Act establishes a tiered approach to requirements, with those responsible for premises and events in scope required to fulfil different requirements according to the number of individuals it is reasonable to expect may be present at the same time.  The requirements vary accordingly, acknowledging that larger venues and events may be impacted to a greater extent by an attack and should be expected to do more.

Subject to other criteria being met, to be qualifying premises, 200 or more individuals (including staff) must, from time to time, be reasonably expected to be present at the same time in connection with one or more uses specified in the Act. Where the number of individuals (including staff) reasonably expected to be present is between 200 and 799, the premises will be in the standard tier.

Where 800 or more individuals (including staff) may be reasonably expected at the premises from time to time, they will be enhanced tier premises unless the Act provides otherwise.

One of the conditions to be a qualifying event is that 800 or more individuals (including staff) may reasonably be expected to present at the same time at some point during the event. Events beneath this threshold are not in scope.

Standard tier premises

Those responsible for standard tier premises are required to have in place, so far as is reasonably practicable, appropriate public protection procedures.

These are procedures that may be expected to reduce the risk of physical harm to individuals if an act of terrorism occurred at the premises or in the immediate vicinity. They are procedures to be followed by people working at the premises where they suspect an act of terrorism is occurring, or is about to occur, at the premises or in the immediate vicinity.

The types of procedure are detailed in the section 27 guidance, alongside being listed in the Act. The requirements for standard tier premises are focused on activities to enact policies and procedures that are expected to be simple and low cost. The aim of these requirements is to improve staff preparedness and responses. The Act does not require physical alterations to premises or the purchase of equipment for the purpose of having these procedures in place.

Enhanced tier premises and qualifying events

Those responsible for enhanced tier premises and qualifying events are required to have in place public protections procedures too, but they must also do more in recognition of the potentially more impactful consequence of an attack.

They are required to have in place, so far as is reasonably practicable, appropriate public protection measures. These are measures that further the objectives of reducing the vulnerability of the premises or event to acts of terrorism or reducing the risk of physical harm to individuals, thereby providing better protection from acts of terrorism.

The types of measures are detailed in the section 27 statutory guidance, alongside being listed in the Act.

Oversight, advice and inspection

The Security Industry Authority (SIA) will discharge the regulatory functions set out in the Terrorism (Protection of Premises) Act. This includes investigating suspected non-compliance and, where appropriate, taking enforcement action.

These functions will be delivered through a new function of the SIA. The Government was clear during passage of the Act that a core principle of the SIA’s regulatory approach would be to support, advise and guide those responsible for premises and events to meet the requirements of the legislation.

Where required they will also investigate and enforce compliance with the requirements, using a series of powers and sanctions to address serious or persistent cases of non-compliance. This includes the power to issue penalties to those who fail to fulfil the requirements and to place restrictions on enhanced tier premises and qualifying events in the most serious cases.

When will the legislation come into effect?

The Act received Royal Assent on 3 April 2025, and it is expected that the implementation period will be at least 24 months from this date.

Whilst those that fall within scope of the Act are encouraged to begin considering the requirements, they should note that there will be no legal requirement to comply until the legislation comes into force. On 15 April 2026, the Home Office published section 27 statutory guidance. The statutory guidance can be found on GOV.UK.

This guidance will assist those responsible to understand the requirements set out in the legislation. It is designed to be easy to follow, needing neither particular expertise nor the use of third-party services offered by the private sector in respect of compliance with this legislation.

Further information on which premises and events are in scope of the legislation can be found in chapter 4 and 5 of the statutory guidance.  

Government’s intent is that those responsible for premises and events in scope can comply with the Act without needing to buy specialist services in respect of compliance.

1. The Act was granted Royal Assent on 3 April 2025, but these requirements have not yet been commenced. This means that they are not yet in force and so do not need to be complied with until brought into force by regulations.  ↩