Martyn’s Law: Fact vs. Fiction

---

 The Terrorism (Protection of Premises) Act 2025 (Martyn’s Law) establishes statutory security standards across the UK. The Home Office issued official guidance to clarify common misunderstandings surrounding compliance, costs, enforcement, and operational obligations. 

• FACT: Following Royal Assent on 3 April 2025, a minimum 24-month implementation period was established. Full legal compliance is expected in April 2027. This window allows venue operators time to review statutory guidance published on ProtectUK and prepare without immediate regulatory penalty.
  PDF+ 2

•  FACT: Premises under the 200-person capacity threshold have no legal obligation under the Act. However, operators are still encouraged to establish a strong security culture. Free tools, such as Action Counters Terrorism(ACT) e-learning and See, Check and Notify (SCaN) training, remain available via ProtectUK and NPSA. 

• FACT: Government impact assessments estimate average annual compliance costs at:
  
  • Standard Tier (200–799 capacity): ~£330 per year, reflecting staff time spent on emergency planning rather than hardware purchases.
    PDF
  • Enhanced Tier (800+ capacity): ~£5,210 per year, covering risk assessments, operational measures, and training tailored to site-specific resources.
    PDF
• Standard Tier venues focus exclusively on low-cost, procedural readiness (Evacuation, Invacuation, Lockdown, Communication) using existing doors, locks, and alarms.

•  FACT: The Security Industry Authority (SIA) does not charge fees for venue registration, post-inspection advice, or routine regulatory checks. Notifications will open closer to the 2027 enforcement date. 

•  FACT: The SIA cannot arbitrarily shut down businesses. Closure or restriction powers are reserved strictly for exceptional circumstances involving an immediate, clear threat to public safety. For standard compliance issues, the SIA relies on guidance, advice, compliance notices, or financial penalty notices. Venues retain the right to appeal regulatory decisions to a tribunal. 

•  FACT: The "Responsible Person" is typically the corporate entity, company, or organization holding operational control over the venue. For example, a single corporate group operating 50 locations is the Responsible Person for all 50 sites. However, Enhanced Tier entities must designate one senior officer (e.g., Director or Board Member) to oversee organizational compliance. 

•  FACT: Operational responsibility remains with the primary venue operator, not the short-term hirer. While hire contracts may include compliance terms for events, legal accountability under Martyn’s Law cannot be transferred to the hirer. 

FACT:

• Enhanced Tier Venues: Do not need to notify the SIA of individual day-to-day functions or hired events (e.g., conferences, film premieres) because the physical building is already registered.
  PDF
• Standard Tier / Out-of-Scope Sites: Only require event notification if a specific, ticketed event temporarily pushes the site capacity over the 800+ threshold, qualifying it as an Enhanced Tier event. In that case, the event organizer submits the notification.

• FACT: The Act contains no explicit statutory requirement to purchase first aid hardware, trauma kits, or medical equipment. While the government encourages appropriate emergency medical preparedness, it is not a legal mandate under Martyn’s Law.

• FACT: Neither the Home Office, the SIA, nor NaCTSO endorse private third-party consultants or commercial products. The law is structured so that venue operators can achieve full compliance using free official guidance, toolkits, and templates provided on ProtectUK.