Martyn's Law receives Royal Assent: what does this mean for your business?

The Terrorism (Protection of Premises) Act 2023, commonly known as Martyn's Law, received Royal Assent on 3 April 2025.

This legislation, driven by the tireless campaigning of Figen Murray, the mother of Martyn Hett, who tragically lost his life in the Manchester Arena attack, aims to significantly enhance public safety across the United Kingdom.

Specifically, the Act mandates the implementation of improved preparedness and protective security measures against terrorist attacks at specified premises and events. A phased implementation, with a minimum 24-month lead time, will facilitate the establishment of the Security Industry Authority's (SIA) new regulatory functions and provide responsible parties with sufficient time to comprehend and fulfil their obligations.

The lead in time means that affected businesses will not need to comply with the new provisions until 2027 at the earliest.

Under the new Act, certain larger premises are mandated to assess and implement appropriate measures to mitigate their vulnerability to terrorist acts. A tiered approach is established, with varying requirements based on the anticipated number of individuals present at a premises or event.

The 'Standard Tier' applies to smaller premises with an expected capacity of 200 to 799 individuals. The requirements for this tier focus on simple, low-cost activities designed to enhance the ability of those working within the premises or at the event to reduce harm and save lives during an attack.

These activities encompass evacuation plans for safely exiting the premises, invacuation measures for directing people to secure internal areas, and lockdown procedures to secure the premises by actions such as locking doors and closing shutters to restrict or prevent attacker entry. Notably, the Standard Tier does not mandate the implementation of physical security measures.

Larger premises and qualifying public events with a capacity of 800 or more individuals will fall under the Enhanced Tier.

In addition to the Standard Tier requirements, these larger premises and events will be subject to further obligations. This includes implementing, as far as reasonably practicable, appropriate public protection measures to reduce their vulnerability to terrorist acts and the risk of physical harm should an attack occur. Appropriate measures for Enhanced Tier premises and events may include bag searches, CCTV or other monitoring systems, and vehicle security measures.

Those responsible for Standard Tier premises, where it is reasonably expected that between 200 and 799 individuals may be present at any given time, will be required to notify the SIA that they are responsible for the premises. They must also confirm that they have implemented, as far as reasonably practicable, appropriate public protection procedures that could reasonably be expected to reduce the risk of physical harm to individuals in the event of an attack.

Those responsible for enhanced tier premises and qualifying events, where it is reasonably expected that more than 800 individuals may be present at any given time, will be required to:

• notify the SIA that they are responsible for the premises or event.
• confirm they have implemented, as far as reasonably practicable, appropriate public protection procedures that could reasonably be expected to reduce the risk of physical harm to individuals in the event of an attack.
• confirm they have implemented, as far as reasonably practicable, appropriate measures that could reasonably be expected to reduce both the vulnerability of the premises or event to a terrorist attack and the risk of physical harm to individuals in the event of an attack occurring there or nearby.
• document the public protection procedures and measures in place or proposed to be put in place and provide this documentation to the SIA.

This legislation will apply across England, Wales, Scotland, and Northern Ireland, ensuring consistent public safety standards throughout the United Kingdom. The SIA will provide support and guidance to those responsible for premises and events in fulfilling the legislative requirements. However, in cases of serious or persistent non-compliance, the SIA will be empowered to take enforcement action.

Visit BrAInbox today where you can find answers to questions like Who will Martyn's law apply to?

• National insurance hike to 15% kicks in from 6 April
• 'Human driver' still needed for AI R&D claims
• Court of Appeal rules whistleblowing protection does not apply to external job applicants
• NHS patients at risk as hospital urgent repair costs triple in a decade