Martyn's Law: How Businesses Need to Prepare
Many business owners assume anti-terrorism legislation only affects large venues, stadiums, or major public events. However, under Martyn's Law, a wide range of premises and events that regularly have 200 or more people on site could soon have a legal duty to put specific security and emergency procedures in place.
If your business operates a shop, leisure facility, hospitality venue, visitor attraction, place of worship, community facility, office building, or any other premises where significant numbers of people gather, this legislation may apply to you. Failure to comply could result in regulatory enforcement action once the new requirements come into force.
The good news is that businesses still have time to prepare. In this guide, we explain who is covered by Martyn's Law, what your legal obligations may be, and the practical steps you can take now to ensure your business is ready.
What is Martyn’s Law?
Officially known as the Terrorism (Protection of Premises) Act 2025, the law is named after Martyn Hett, one of the 22 people killed in the 2017 Manchester Arena bombing. It aims to improve public safety by ensuring that premises and events take proportionate steps to reduce vulnerability to terrorism.
With the law expected to come into force in spring 2027, now is the time for businesses, including SMEs, to understand whether they are affected and what they need to do to prepare.
Does Martyn’s Law apply to my business?
Martyn’s Law will generally apply to premises expecting 200 or more people to be reasonably expected to be present at the same time, including staff.
What if my business is too small to be covered?
Even if you aren’t expecting 200 people or more to be present on your premises at the same time, reviewing your emergency arrangements is good practice. Consider how staff would raise the alarm, communicate with visitors and respond if an incident occurred.
Make sure employees understand the relevant procedures and know who is responsible for making decisions during an emergency. Existing fire and emergency plans can provide a useful starting point, although different incidents may require different responses.
What do businesses need to do to prepare?
For businesses that fall within scope, the requirements depend on which tier applies:
Standard tier (capacity of 200-799 people)
Must put in place basic, low-cost public protection procedures such as training workers in knowing how to guide, shelter, or communicate during an incident.
Enhanced tier / qualifying events (800+ people):
Must designate a senior officer to oversee compliance and notify the Security Industry Authority of the designated responsible person
Must conduct documented vulnerability and risk assessments
Must implement active security measures in monitoring, movement, physical security and security of information
What are the best practices for workplace security and emergency planning?
Regardless of whether Martyn’s Law applies, businesses can improve workplace security and emergency preparedness by:
Reviewing emergency plans: Make sure procedures cover different incidents, not just fire.
Training staff: Ensure employees know how to raise the alarm, communicate with others and follow emergency instructions.
Clarifying responsibilities: Identify who will make decisions during an incident and what to do if the usual person responsible is unavailable.
Reviewing access and communication: Consider how visitors are managed and how important messages would be shared quickly.
Keeping plans up to date: Review procedures when premises, staffing or working arrangements change, and practise them where appropriate.
These practical steps can help businesses improve safety, prepare for unexpected incidents and support a more secure workplace.
Need some assistance understanding your health and safety responsibilities or reviewing your workplace procedures? Robinson Grace HR Consultancy also provides Health & Safety support, either on a retained or an on-demand basis! Simply pick up the phone to discuss what you might need on 01793 311937 or email us via clientservices@robinsongracehr.com.
Frequently Asked Questions
What is Martyn’s Law and when does it come into force?
Martyn’s Law is UK legislation designed to improve security and preparedness for terrorist attacks at certain premises and events. The main requirements are expected to come into force in spring 2027, giving businesses time to prepare.
Does the 200-person threshold mean 200 employees?
No. The threshold relates to the number of people, including staff, reasonably expected to be present at qualifying premises at the same time, not the business’s total workforce.
Will my business need to buy security equipment to comply with Martyn’s Law?
Not necessarily. Standard-tier requirements focus on appropriate public protection procedures. Enhanced-tier businesses have additional duties, but measures should be proportionate and reasonably practicable for the premises or event.
Where can businesses find official Martyn’s Law guidance?
The Security Industry Authority’s Martyn’s Law guidance explains the scope of the legislation, the different tiers and the requirements for businesses and other organisations.
Check out other Blogs in our series:
The content of our blogs is intended for general information and not to replace legal or other professional advice.
Martyn's Law: How Businesses Need to Prepare
Comments