Martyn’s Law: A Deep Dive into the UK’s Landmark Security Legislation
The echoes of that horrific night in May 2017 still reverberate, don’t they? The Manchester Arena bombing, a cowardly act of terror, ripped through a joyous crowd, leaving 22 innocent lives lost and countless others forever scarred. It was a stark, brutal reminder of our vulnerability, especially in public spaces. Out of that profound grief, however, a powerful movement for change was born, largely spearheaded by Figen Murray, the incredibly courageous mother of Martyn Hett, one of the victims.
Her tireless campaign for improved protective security across the UK culminated in April 2025 with the enactment of the Terrorism (Protection of Premises) Act 2025. You might know it better as Martyn’s Law. This isn’t just another piece of legislation; it’s a fundamental shift, a robust framework designed to bolster security at venues and events, ensuring we’re all a little safer when we step out to enjoy life’s moments. The Act places a critical, proactive duty on those responsible for public spaces, aiming to reduce their susceptibility to terrorist attacks and protect individuals from harm. It’s about learning from the past to secure our future.
Focus360 Energy: property compliance services – pre-planning to post-construction. Learn more.
Unpacking the Philosophy Behind Martyn’s Law: A Culture of Vigilance
Martyn’s Law isn’t just about ticking boxes; it’s a call to action, demanding a re-evaluation of how we perceive and manage risk in public venues. It recognizes that security can’t solely be the domain of law enforcement or intelligence agencies. Instead, it posits that those who operate public spaces – from concert halls to shopping malls – are frontline defenders, holding a significant responsibility for the safety of their patrons. It’s a philosophy rooted in the idea of ‘collective security,’ where vigilance and preparedness become embedded in the operational DNA of every applicable establishment.
For far too long, protective security measures were often viewed as an afterthought, an extra expense, or something only relevant to high-profile government buildings. Martyn’s Law shatters that complacency. It says, unequivocally, that every public space where people gather carries an inherent risk, and therefore, an inherent duty to protect. Think about it: when you walk into a stadium, a theatre, or even a busy cafe, you implicitly trust that the venue has considered your safety. This Act makes that implicit trust an explicit, legal obligation. It’s a proactive stance, moving away from merely reacting to threats towards actively mitigating them before they materialise.
So, what constitutes ‘terrorism’ in the context of this Act? While the Act itself doesn’t redefine terrorism, it aligns with existing definitions under the Terrorism Act 2000. Essentially, we’re talking about actions designed to influence the government or intimidate the public, carried out for political, religious, racial, or ideological causes, which involve serious violence against a person, serious damage to property, or endanger life. The focus here is on preventing the impact of such acts by ensuring premises are as resilient as possible.
Defining the Scope: Who’s Caught in the Net?
One of the first things you’ll want to know is whether this Act applies to your premises or events. It’s quite comprehensive, covering venues primarily used for a range of activities where a significant number of people might gather. We’re talking about places dedicated to retail, accommodation, leisure, entertainment, sports, hospitality, education, healthcare, and even places of worship. If your business falls into one of these categories and meets the occupancy thresholds, then you’re definitely on the radar.
The Act cleverly categorises premises based on their potential maximum occupancy, introducing two distinct tiers of duty. It’s a pragmatic approach, recognising that the security demands of a small local cinema aren’t the same as a massive football stadium.
-
Standard Duty Premises: These are venues where it’s reasonable to expect between 200 and 799 individuals to be present simultaneously. Think about a larger restaurant, a decent-sized community hall, a regional theatre with a few hundred seats, or a mid-sized retail store during peak shopping hours. The responsibilities here are significant but tailored to their scale.
-
Enhanced Duty Premises: This tier applies to venues designed to accommodate 800 or more individuals at any given time. Here, we’re envisioning the big players: major concert arenas, vast shopping centres, sprawling convention halls, large-scale sporting stadiums, and even theme parks. The duties for these premises are, as the name suggests, more extensive and rigorous, reflecting the greater potential for harm in such large gatherings.
Now, how exactly do you determine if 200 or 800 people ‘might be present simultaneously’? It isn’t just about your maximum fire capacity, although that’s certainly a factor. It requires a thoughtful assessment, considering peak operational times, specific event capacities, and even hypothetical scenarios. You’ll need to look at historical data, event schedules, and perhaps even conduct crowd modelling. It’s about what’s reasonably foreseeable, not just what’s happened historically. For instance, a bustling restaurant that typically seats 150 might still fall under the Standard Duty if, during special events or peak weekends, it often has 250 patrons, plus staff, on site. Conversely, a concert hall designed for 1,000 attendees is unequivocally an Enhanced Duty premise. Furthermore, the Act considers events held within temporary structures or at outdoor locations, so long as there’s a clear ‘responsible person’ and the occupancy thresholds are met. This means festivals, markets, and open-air concerts aren’t let off the hook; they’ll need to demonstrate similar diligence.
The Core Requirements: Pillars of Protection for Public Spaces
Martyn’s Law isn’t just about classifying venues; it’s about mandating concrete actions. For both Standard and Enhanced Duty premises, a foundational requirement is the implementation of appropriate public protection procedures. These aren’t optional extras; they’re essential operational components designed to save lives when the unthinkable happens. Let’s break down what these really entail:
Comprehensive Risk Assessments
This is where it all begins. Before you can secure a premise, you must first understand its vulnerabilities. The Act demands thorough risk assessments specific to terrorist threats. This isn’t your average health and safety check; it’s a specialised evaluation that considers:
- Threat Intelligence: What’s the current national and local threat level? What are the common modus operandi of terrorist groups? This requires staying informed and potentially engaging with specialist counter-terrorism policing units or consultants.
- Vulnerability Analysis: How might your specific premise be targeted? Are there easily accessible entry points? Are there areas where a device could be planted unnoticed? Do you have blind spots in your CCTV coverage? Are your building materials resilient enough?
- Impact Assessment: What would be the likely consequences of an attack on your specific venue? How many people could be harmed? What would be the operational and reputational fallout? This informs the scale of your protective measures.
These assessments aren’t one-off exercises. They need regular review, particularly after significant events, changes to the premises, or shifts in the national threat landscape. Who conducts them? While internal teams can handle some aspects, particularly for Standard Duty premises, Enhanced Duty venues often benefit from engaging accredited security consultants with expertise in counter-terrorism planning.
Robust Public Protection Plans
Once you understand the risks, you need a plan to mitigate them. These plans must be clear, actionable, and communicated effectively.
-
Evacuation Plans: Far more than just pointing to the nearest fire exit. A comprehensive evacuation plan details primary and secondary escape routes, clearly marked and well-lit. It includes designated assembly points, protocols for accounting for all individuals, and specific provisions for assisting people with disabilities, the elderly, or young children. Communication during an evacuation is paramount; think about clear PA announcements, digital signage, and even staff communication via radios. Have you considered what happens if a primary exit is blocked or compromised? That’s where secondary routes come in.
-
Lockdown Protocols: In certain scenarios, an evacuation might be more dangerous than securing the premises. Lockdown protocols detail how to quickly and effectively secure areas within the venue, what internal communication systems to use, and clear roles for staff in guiding patrons to safety within the building. This often involves securing doors, moving away from windows, and maintaining silence. These procedures require regular drills to ensure everyone knows their role.
-
Communication Strategies: Effective communication during an incident is critical. This encompasses internal communication among staff to coordinate responses, communication with the public to provide clear instructions, and crucially, efficient communication channels with local law enforcement and emergency services. This might involve integrated PA systems, discreet staff radios, direct lines to control rooms, and pre-scripted messages for digital displays or social media, ensuring consistent and accurate information goes out.
Staff Training and Drills
A plan is only as good as the people executing it. Martyn’s Law places a strong emphasis on empowering staff. It’s not just your dedicated security personnel who need to be trained; everyone from front-of-house staff to cleaners, caterers, and administrative teams becomes part of the protective network. Training should cover:
- Recognising Suspicious Behaviour: The ‘See, Check, Communicate’ principle. What does unusual activity look like? How do staff discreetly report it?
- Emergency Response Procedures: How to initiate evacuation or lockdown, operate emergency equipment, and provide initial assistance.
- First Aid and Trauma Care: Equipping staff with basic medical skills to assist casualties before emergency services arrive.
- Incident Management: How to remain calm under pressure, follow protocols, and assist emergency responders upon their arrival.
Furthermore, plans must be regularly exercised. Tabletop exercises, where staff walk through scenarios mentally, are valuable. But full-scale drills, simulating an actual incident, are invaluable for identifying weaknesses in plans and staff reactions. I recall a time when my team ran a drill at a client’s large conference centre. What we thought was a perfect evacuation route turned into a bottleneck because people naturally gravitated to the main entrance, despite clear signage for other exits. It was a simple lesson, easily fixed, but critical for real-world efficacy.
The Interplay with Building Regulations and Design: A New Lens for Development
While Martyn’s Law doesn’t directly amend existing building regulations – it’s not rewriting Part B for fire safety, for example – its influence on how venues are designed, built, and renovated is profound. It forces architects, developers, and facilities managers to view their projects through a new, much more rigorous security lens. It’s about ‘designing in’ security, rather than bolting it on as an afterthought.
Consider, if you will, the implications for new builds and significant refurbishments:
Occupancy Levels: Beyond Fire Capacity
Determining the maximum occupancy now takes on an additional layer of complexity. It’s not just about the safe number of people from a fire perspective; it’s about the number that can be safely managed in a security incident. This might lead to tighter controls on ticket sales, revised crowd density calculations, and more sophisticated visitor management systems. Architects will need to justify their proposed capacities not just for fire egress, but for rapid dispersal or controlled lockdown in a security scenario.
Evacuation Routes and Flow: More Than Just Exits
This is a critical area. Architects and building designers must now ensure that evacuation routes are not just clear and accessible but also resilient. This could mean:
- Wider Aisles and Corridors: Ensuring smooth, rapid flow of large crowds without creating crush points.
- Redundant Exits: Having multiple, diverse exit options so that if one is compromised, others are readily available.
- Enhanced Wayfinding: Clear, unambiguous signage, potentially incorporating dynamic digital displays that can direct people away from danger zones.
- Emergency Lighting and Power Back-up: Ensuring routes remain lit and accessible even if main power fails.
- Physical Security of Exits: Ensuring exit doors can be secured after evacuation to prevent re-entry by an assailant, but also remain easily operable from the inside.
- Muster Points: Safe, pre-determined external locations that are themselves protected from secondary threats.
Think about a major theatre with a 300-person capacity. Before Martyn’s Law, they might focus on fire egress. Now, they must consider how efficiently 300 people could evacuate if an incident occurred at the main entrance. This might involve creating a new, dedicated emergency exit, or significantly upgrading an existing less-used one, ensuring it’s clearly marked, well-lit, and easily accessible for everyone, including those with mobility challenges. That’s a fundamental change in design philosophy.
Robust Security Infrastructure: Layering Defences
The Act will drive investment in a variety of security technologies and physical measures:
- Advanced Surveillance Systems (CCTV): Not just cameras, but intelligent systems with analytics capable of detecting suspicious packages, unusual crowd movements, or even facial recognition (within privacy guidelines, of course). This involves strategic camera placement, high-resolution feeds, robust monitoring capabilities, and clear data retention policies.
- Access Control: Beyond turnstiles, this could include sophisticated visitor management systems, biometric access for staff, bag checks, and even airport-style security screening at larger venues. It’s about controlling who enters and, crucially, what they bring with them.
- Physical Security Enhancements: This is where the building itself becomes a protective barrier. We’re talking about Hostile Vehicle Mitigation (HVM) measures like reinforced bollards, strategically placed planters, or street furniture designed to prevent vehicles from ramming into crowded areas. There might be a need for blast-resistant glazing, reinforced doors, and secure perimeters, all designed to harden the target.
- Stand-off Distances: Where possible, architects will need to design spaces that naturally create distance between potential threat vectors (like a road) and the main building entrance or crowded areas. This can be achieved through landscaping, architectural features, or strategic placement of external seating.
- Integrated Security Management Systems: The holy grail is a system that integrates CCTV, access control, fire alarms, and communication systems into a single, cohesive platform, allowing security teams to have a real-time, holistic view of the premises.
This isn’t about turning every public building into a fortress; it’s about making thoughtful, proportionate security enhancements that blend into the environment while significantly increasing resilience. It’s a challenging but necessary balance to strike, ensuring safety without sacrificing accessibility or aesthetic appeal.
Enforcement and the Role of the Security Industry Authority (SIA)
Bringing Martyn’s Law to life requires a robust regulatory body, and the Security Industry Authority (SIA) has been tasked with this crucial role. This represents a significant expansion of the SIA’s remit, moving beyond its traditional focus on licensing security personnel to overseeing the protective security measures of premises themselves. It’s a big ask, but they’re well-positioned for it.
The SIA’s responsibilities under the Act are multifaceted:
-
Guidance and Support: They won’t just be cracking the whip. A key function will be to provide clear, practical guidance to venue operators on understanding and implementing the Act’s requirements. Expect online resources, detailed handbooks, perhaps even workshops and dedicated helplines. The goal isn’t to trip people up, but to help them comply effectively.
-
Monitoring Compliance: This is where the rubber meets the road. The SIA will be assessing whether venues have genuinely implemented the necessary security measures. This will involve a combination of approaches: self-assessment requirements where venues report on their compliance, routine inspections by SIA officers, and potentially targeted audits based on risk profiles. They’ll be looking for tangible evidence: documented risk assessments, staff training records, detailed public protection plans, and evidence of drills being conducted.
-
Enforcement Actions: For venues that fall short, the SIA has a graduated scale of enforcement powers, designed to encourage compliance and, when necessary, penalise negligence:
- Compliance Notices: These are essentially warnings, detailing specific areas where a venue is non-compliant and setting clear deadlines for rectification. It’s an opportunity to correct course without immediate punitive measures.
- Monetary Penalties: If non-compliance persists or is particularly egregious, the SIA can levy significant fines. These won’t be trivial amounts; they’ll be designed to be a genuine deterrent, likely tiered based on the severity of the breach and the size/capacity of the venue. The message is clear: neglect your duties, and it’ll cost you dearly.
- Restriction Notices: This is the ultimate sanction. In severe or persistent cases of non-compliance, the SIA can issue a restriction notice, which could limit a venue’s operations or, in the most extreme circumstances, even mandate its temporary closure. Imagine the reputational and financial damage of having your venue’s capacity reduced or being forced to shut down due to security failings. It’s a powerful lever.
It’s important to note the 24-month grace period from the Act’s passage before enforcement begins. This wasn’t an oversight; it was a deliberate, pragmatic decision. It acknowledges the scale of the task ahead for thousands of venues across the UK. This isn’t a period for complacency, though. It’s a vital window for venue operators to conduct their risk assessments, develop their plans, train their staff, and make any necessary infrastructural upgrades. Those who delay will find themselves in a precarious position when the SIA’s enforcement powers come fully into play.
Navigating Compliance: A Proactive Road Map for Venue Operators
The clock is ticking, and for venue operators, now isn’t the time for procrastination. A proactive, systematic approach to compliance is not just about avoiding penalties; it’s about genuinely safeguarding lives and building public trust. You’ve got to take this seriously, folks.
Step 1: Deep-Dive Risk Assessment
Don’t just skim the surface. Engage experts, either in-house or external consultants, who understand counter-terrorism risk. Conduct a comprehensive threat, vulnerability, and impact assessment. This means:
- Understanding the Threat Landscape: What types of attacks are most likely? Are there specific local considerations?
- Identifying Vulnerabilities: Walk through your premises with a critical eye. Where are the weak points? How could an attacker gain access, conceal items, or cause maximum harm? Consider your supply chain, contractor access, and even digital vulnerabilities.
- Assessing Impact: If an incident occurs, what would be the scale of casualties, disruption, and reputational damage? Use this to prioritise your mitigation efforts.
Step 2: Develop and Document Robust Plans
Based on your risk assessment, create detailed, actionable public protection plans. These aren’t just for your files; they’re living documents that your team needs to understand and implement. Ensure they cover:
- Evacuation: Clear routes, assembly points, provisions for vulnerable persons, communication protocols.
- Lockdown: Procedures for securing areas, internal communication, staff roles.
- Invacuation (Shelter-in-Place): For situations where staying inside is safer than evacuating, such as external threats.
- Communication: Internal (staff-to-staff), external (staff-to-public, staff-to-emergency services).
- Incident Response: How to manage the immediate aftermath, including first aid, liaison with emergency services, and post-incident care.
Step 3: Implement and Integrate Security Infrastructure
This might involve upgrading existing systems or installing new ones:
- CCTV and Analytics: Ensure comprehensive coverage, high-quality images, and smart analytics for early detection.
- Access Control: Review and enhance entry points, bag checks, and visitor management.
- Physical Barriers: Consider HVM measures, blast-resistant materials, and secure perimeters where appropriate.
- Communication Systems: Invest in reliable PA systems, digital signage, and internal communication tools.
Step 4: Comprehensive Staff Training and Drills
Training isn’t a one-off event. It’s an ongoing process. Every single person who works in your venue, regardless of their role, needs to understand their responsibilities. Train them on:
- General Awareness: The ‘Run, Hide, Tell’ principles, recognising suspicious behaviour (e.g., unattended bags, unusual photographic activity, individuals loitering).
- Specific Roles: Empowering designated incident response teams, first aiders, and security personnel with advanced training.
- Practice, Practice, Practice: Conduct regular tabletop exercises and full-scale drills. This is invaluable for refining plans and building confidence.
I remember speaking with a venue manager who thought their staff were well-prepared. But during a surprise drill, the team handling a ‘suspect package’ forgot to clear the immediate area before calling security. It highlighted a simple but potentially critical oversight, easily rectified with further training. That’s the value of real-world practice.
Step 5: Foster Collaboration and Information Sharing
Security isn’t a solo act. Engage with external stakeholders:
- Local Law Enforcement: Build relationships, share intelligence (where appropriate), and participate in joint exercises. Understand their response protocols.
- Emergency Services: Coordinate your plans with fire and ambulance services for seamless integration during an incident.
- Local Authorities: Liaise with licensing and planning departments.
- Other Venues: Consider joining local security networks to share best practices and threat intelligence. You’re all in this together.
Step 6: Cultivate a Culture of Security
Ultimately, Martyn’s Law aims to embed a proactive security mindset throughout an organisation. It’s about making protective security an integral part of daily operations, not just a separate department. Encourage staff to be vigilant, to report concerns, and to take ownership of safety. This culture will be your strongest defence.
The Human Heart of the Law: Remembering Martyn Hett
It’s easy to get lost in the legal jargon and technical requirements of a new Act. But we must never forget the profound human tragedy that spurred Martyn’s Law into existence. This legislation carries the name of Martyn Hett, a vibrant, kind soul whose life was cruelly cut short. His mother, Figen Murray, transformed her unbearable grief into a relentless, dignified campaign for change. Her advocacy, driven by love and a desire to prevent others from experiencing such loss, is the beating heart of this law.
Martyn’s Law isn’t about creating fear; it’s about fostering confidence. It’s about ensuring that when families attend a concert, friends gather for a meal, or colleagues meet for an event, they can do so with a greater sense of security. It asks all of us to consider, ‘What if?’ and then provides a framework to answer that question with preparedness, resilience, and protection. Isn’t that something we all want for our communities?
Anticipating Challenges and Considerations Ahead
While Martyn’s Law is a welcome and necessary evolution in national security, its implementation won’t be without hurdles. It’s important to acknowledge these, not to diminish the Act’s importance, but to ensure a smoother transition.
-
The Cost Burden: For many smaller businesses, community centres, or independent venues, the financial implications of enhanced security measures – from risk assessments to infrastructure upgrades and ongoing training – could be significant. Will there be government grants or support mechanisms available to help these organisations comply? This is a crucial question for equitable implementation.
-
Complexity and Understanding: The Act’s requirements, particularly for Enhanced Duty premises, are complex. Many venue operators, especially those without dedicated security teams, will need clear, accessible guidance and support to navigate these new obligations effectively. The SIA’s role in this will be paramount.
-
Balancing Security and Openness: A core challenge will be how to implement robust security measures without turning every public space into an intimidating fortress. The aim is to make venues safer, not unwelcoming. This requires thoughtful design, discreet security features, and a customer-service oriented approach from security personnel.
-
Public Perception: Communicating the ‘why’ behind these new measures to the public is crucial. People need to understand that these changes are for their benefit, fostering confidence rather than fear or a sense of over-surveillance.
-
Adaptability to Evolving Threats: Terrorist tactics are constantly evolving. Martyn’s Law establishes a framework, but its effectiveness will depend on its ability to adapt and be interpreted flexibly to counter new and emerging threats. Regular reviews and updates will likely be necessary.
These challenges are not insurmountable, but they demand ongoing dialogue, collaboration, and a willingness to learn and adapt as the law becomes embedded in our national security landscape.
Conclusion: A Safer Future, Together
The Terrorism (Protection of Premises) Act 2025, or Martyn’s Law, truly marks a pivotal moment in the UK’s approach to public safety. It isn’t just about stricter rules; it’s about instilling a proactive mindset, a shared responsibility, and a culture of vigilance across our public spaces. While it doesn’t directly rewrite building regulations, it absolutely necessitates a comprehensive re-evaluation of security protocols, influencing everything from architectural design to operational procedures.
For anyone responsible for a public venue, understanding and diligently implementing the requirements of Martyn’s Law is no longer optional. It’s a fundamental obligation, a moral imperative that builds resilience against potential threats and, most importantly, instils vital confidence in the public. It’s a testament to human spirit, that even out of profound tragedy, we can forge stronger, safer communities. Let’s embrace this shift, work together, and ensure that every public space is a place of enjoyment and security, just as Martyn Hett and countless others deserve.
References
- UK Parliament. (2025). Lords completes its scrutiny of Terrorism (Protection of Premises) Bill. https://www.parliament.uk/business/news/2025/march/lords-tidies-up-the-terrorism-protection-of-premises-bill/
- Keoghs. (2025). Terrorism (Protection of Premises) Act 2025 (‘Martyn’s Law’) Receives Royal Assent. https://www.keoghs.co.uk/keoghs-insight/terrorism-protection-of-premises-act-2025-martyns-law-receives-royal-assent
- WTW. (2025). The Terrorism (Protection of Premises) Act 2025. https://www.wtwco.com/en-gb/insights/2025/04/the-terrorism-protection-of-premises-act-2025
- ABTT. (2025). Terrorism (Protection of Premises) Act 2025. https://www.abtt.org.uk/wp-content/uploads/2025/04/Terrorism-Protection-of-Premises-Act-2025.pdf
- England NHS. (2025). Terrorism (Protection of Premises) Act 2025 – Application to Healthcare buildings. https://www.england.nhs.uk/wp-content/uploads/2025/11/PRN02056-netb-terrorism-protection-of-premises-act-2025-application-to-healthcare-buildings.pdf
- Legislation.gov.uk. (2025). Terrorism (Protection of Premises) Act 2025. https://www.legislation.gov.uk/ukpga/2025/10/body
- ProtectUK. (2025). Terrorism (Protection of Premises). https://www.protectuk.police.uk/sites/default/files/2025-09/31.187_HO_Martyns%20Law_1_pager_Web_1.pdf
- Gowling WLG. (2025). What are the legal requirements of the Terrorism Protection of Premises Act 2025. https://gowlingwlg.com/en/insights-resources/articles/2025/what-are-the-legal-requirements-of-the-terrorism-protection-of-premises-act-2025
- House of Lords Library. (2025). Terrorism (Protection of Premises) Bill: HL Bill 53 of 2024–25. https://lordslibrary.parliament.uk/research-briefings/cbp-10111/
- UK Government. (2025). Terrorism (Protection of Premises) Act 2025: Scope (Premises). https://www.gov.uk/government/publications/terrorism-protection-of-premises-act-2025-factsheets/terrorism-protection-of-premises-act-2025-scope-premises

Be the first to comment