Martyn’s Law – What the Terrorism (Protection of Premises) Act 2025 Means for Your Business

Introduction from Dean Ferguson, CEO, BV Associates Ltd

Having served a full career in the British Armed Forces as a Search Advisor, and now as the CEO of BV Associates Ltd, I have spent much of my professional life focused on security, safety preparedness, and keeping people safe in challenging environments. 

The introduction of the Terrorism (Protection of Premises) Act 2025 – widely known as Martyn’s Law – marks an important step forward for the UK. It places clear, proportionate duties on those who manage public premises and events, ensuring that protective security is embedded into everyday operations rather than treated as an afterthought.

Named in memory of Martyn Hett, who was tragically killed in the Manchester Arena attack of 2017, this law underlines why preparedness is essential. For businesses, compliance is only part of the story — it’s also about protecting people, strengthening confidence, and ultimately saving lives.

In this blog, I’ll outline what Martyn’s Law means for UK businesses, which organisations will be affected, and how you can begin preparing now.

Why Martyn’s Law Matters

The UK continues to face a persistent threat from terrorism. The Manchester Arena attack and other incidents highlighted clear weaknesses in how some organisations prepared for emergencies. Too often, safety procedures were inconsistent, incomplete, or not practised.

For years, security planning was recommended as best practice but left to the discretion of each organisation. While many took it seriously, others assumed the risk was too small to justify investment. Martyn’s Law changes that by introducing a legal duty to take proportionate protective measures.

The Act is not about creating excessive burdens. Instead, it seeks to make preparedness a shared baseline across the country — so that every business operating public premises meets a consistent, practical standard of protection.

Who Will Be Affected?

Martyn’s Law applies to a wide range of public premises and qualifying events. If your business welcomes significant numbers of people, you may fall under its scope.

Examples include:

• Shopping centres and larger retail stores
• Restaurants, pubs, bars, and nightclubs
• Theatres, cinemas, sports stadiums, and concert venues
• Hotels, conference centres, and exhibition halls
• Museums, galleries, and visitor attractions
• Places of worship
• Colleges, universities, and training centres with public access
• Busy transport hubs such as bus and train stations

Smaller offices or private premises with limited public access are generally excluded. The law is focused on venues and events where the public gather in large numbers.

Events in scope

Temporary or one-off events such as concerts, fairs, and exhibitions may also fall under Martyn’s Law, depending on their size and the number of people expected to attend.

The Tiered Approach – Standard and Enhanced Duties

The Act uses a tiered system so that obligations remain proportionate to the scale of risk:

• Standard Duty – applies to premises and events where 200 to 799 people may be present.
• Enhanced Duty – applies where 800 or more people are expected.

This means smaller premises still need to plan and train staff, but the more resource-intensive measures apply only to larger venues and events.

What Will Businesses Need to Do?

Standard Tier Requirements

If your organisation falls into the standard tier, your responsibilities will include:

• Registering your premises or even with the regulator (the Security Industry Authority).
• Developing a set of public protection procedures, which outline how you would respond to an incident such as an evacuation or lockdown.
• Providing staff training, so your team know how to spot suspicious behaviour, raise the alarm, and follow emergency procedures.

The emphasis at this level is on straightforward, low-cost actions that make a big difference in an emergency.

Enhanced Tier Requirements

If your venue or event expects 800+ people, you will also need to:

• Carry out a risk assessment to identify vulnerabilities.
• Put in place proportionate security measures where reasonably practicable, such as CCTV, bag checks, controlled access, or barriers.
• Develop detailed security plans showing how risks are being addressed.
• Cooperate with inspections from the regulator to demonstrate compliance.

Enhanced venues don’t have to implement airport-style security unless appropriate. The key principle is reasonably practicable measures — steps that are effective, realistic, and proportionate to your environment.

Documentation, Records and Accountability

Under Martyn’s Law, paperwork matters. Businesses will be expected to maintain:

• Records of risk assessments
• Written emergency and evacuation procedures
• Staff training logs
• Evidence of any security measures in place

Having this documentation not only proves compliance but also strengthens resilience by making sure procedures are thought through, updated, and practised.

Inspections, Enforcement and Penalties

The Security Industry Authority will regulate compliance. They will have powers to:

• Inspect premises and events
• Issue compliance or restriction notices
• Levy significant fines for serious breaches

For larger organisations, financial penalties could reach millions of pounds. For smaller ones, reputational damage could be just as costly. The clear message is that failure to prepare is no longer an option.

When Does It Come Into Effect?

Although the Act has been passed, it will not apply immediately. Businesses will be given up to two years to adapt. During this period, official guidance will be published and training support made available.

This breathing space is welcome, but it is also a warning — those who leave preparation until the last minute may face unnecessary pressure and costs.

What Should Businesses Do Now?

To stay ahead, organisations should start early. Key steps include:

• Check if you’re in scope – calculate the maximum number of people your premises or event can hold.
• Review existing procedures – many businesses already have fire safety and evacuation plans that can be adapted.
• Train staff – awareness training is inexpensive and highly effective.
• Identify quick improvements – secure entry points, communication systems, and signage are often simple fixes.
• Engage stakeholders – involve management, security staff, and frontline employees so everyone understands their role.
• Consider long-term investments – larger venues may need to budget for CCTV, access control, or perimeter security.
• Keep records – start building a compliance file now with training logs, risk assessments, and draft procedures.

Benefits Beyond Compliance

While Martyn’s Law is a legal duty, businesses that embrace it will gain wider benefits:

• Public confidence: Customers, learners, and visitors will feel safer.
• Staff morale: Employees work better knowing their safety is valued.
• Reputation: A visible commitment to safety strengthens trust.
• Resilience: Well-prepared organisations recover more quickly from disruption.

Special Considerations for Training and Education Providers

For training companies, colleges, and universities, the law carries particular weight. These organisations not only host learners but also set the tone for how safety is perceived. Key points include:

• Leading by example: Trainers and administrators act as role models for learners.
• Learner trust: Students and parents expect a safe learning environment.
• Partnerships: Many training providers use third-party venues, so it’s important to clarify responsibilities with landlords or hosts.
• Curriculum links: Embedding awareness of security and preparedness into training programmes can create long-term cultural benefits.

Conclusion

Martyn’s Law is about more than compliance. It is about responsibility, proportion, and a shared commitment to protecting people. By making preparedness a legal duty, the UK is setting a consistent standard across industries and communities.

For businesses, the message is clear: begin planning now. Use the transition period to strengthen procedures, train staff, and document your approach. Those who prepare early will not only avoid penalties but will also demonstrate leadership, resilience, and care for their people.

At BV Associates Ltd and through our health and safety company, we are ready to support organisations with training, risk assessment, and compliance planning. We all know the value of preparation. This legislation is not about fear – it is about saving lives and ensuring that our businesses, venues, and communities remain safe and confident places for everyone.

Wording copy write BV Associates Ltd dtd 29 Sept 25.