Martyn’s Law Explained: Standard vs Enhanced Tier Duties (2025 Act)
Martyn’s Law is now on the statute book. The Terrorism (Protection of Premises) Act 2025 received Royal Assent on 3 April 2025, and it will place new legal duties on people responsible for many everyday venues: shops, bars, restaurants, places of worship, village halls, visitor attractions, sports grounds and more. The duties are not in force yet. The Government has committed to an implementation period of at least 24 months so organisations have time to prepare, which means enforcement is not expected before spring 2027. This guide explains what the Act actually requires, which tier you are likely to fall into, and what you can sensibly do now without paying for things you do not need.
A word of caution. There is already a small industry of “Martyn’s Law certificates” and paid training that implies you must buy a product to comply. You do not. The core standard tier duties are deliberately low cost and procedural. Be wary of anyone selling compliance as a certificate.
Where the law came from
The Act is named after Martyn Hett, one of the 22 people killed in the Manchester Arena attack in 2017. It draws on the recommendations of the public inquiry into that attack, which found that venues and event organisers had no clear, consistent duty to plan for a terrorist incident. The aim of the legislation is straightforward: to make sure the people running publicly accessible premises have thought about what they would do, and can protect the public as far as is reasonably practicable.
The two tiers, and the numbers that matter
Which tier you fall into depends on how many people may be present at the same time, not on floor area or turnover.
individuals may reasonably be expected to be present at the same time. This is the tier most small and medium venues will sit in. Duties are procedural and meant to be achievable at little or no cost.
individuals may be present at the same time, plus qualifying events. Enhanced duty holders must do more, including a documented assessment and physical or procedural security measures.
The headcount is about the number of people who could be present, staff and public together, not a fire capacity figure or a licensing number. If your realistic maximum is below 200, the Act’s main duties do not apply to you, though sensible planning is still worthwhile.
Prefer to bring in a specialist? You can browse fire safety consultants who cover the whole UK.
What standard tier premises will have to do
Standard duty holders must put in place appropriate public protection procedures: the steps staff would take to reduce the risk of physical harm to people if an attack happened at or near the premises. The statutory guidance groups these around four ideas:
There is no requirement at standard tier to buy equipment, install physical security or carry out a formal documented risk assessment. The point is that staff know their roles and could act quickly. Responsible persons will also need to notify the regulator that the premises are in scope.
What enhanced tier premises and qualifying events must do
Enhanced duty holders must do everything at standard tier, plus two extra things. First, a documented assessment of the public protection procedures and measures in place, kept up to date and provided to the regulator on request. Second, appropriate public protection measures covering monitoring the premises and its immediate vicinity, controlling the movement of people, physical safety and security, and the security of information. As with the rest of the Act, these apply only so far as is reasonably practicable, weighing how much a measure reduces risk against the cost, time and effort involved.
Who enforces it
The regulator is the Security Industry Authority (SIA), the same body that licenses the private security industry. It will be given a new function under the Act, working on an advise and support basis first, with enforcement powers in reserve. Those powers include compliance notices, restriction notices and, for serious or persistent failures, monetary penalties. The emphasis, at least at the outset, is on helping duty holders get it right rather than catching them out.
What is not in scope
Not every busy place is caught. Premises already covered by their own security regimes, such as certain transport hubs, are excluded, as are open public parks without controlled entry, the Houses of Parliament and the devolved legislatures. If you are unsure whether your headcount realistically reaches 200, it is worth working that number out honestly rather than assuming.
How this sits alongside fire safety
Martyn’s Law does not replace or change your fire safety duties. If you are a responsible person under the Regulatory Reform (Fire Safety) Order 2005, you still need a suitable and sufficient fire risk assessment and the usual arrangements for means of escape, alarms and evacuation. In practice the two overlap: your fire evacuation plan and your Martyn’s Law evacuation procedure should be consistent, and the staff training can often be combined. Getting your fire risk assessment in good order is a sensible foundation for the wider protective planning the Act expects. If you need one, our fire risk assessment pages list qualified assessors across the UK, and our guide on how to choose a fire risk assessor explains what to look for.
What you can do now, at low cost
You do not need to wait for the duties to bite, and you do not need to spend money to make a start. Work out your realistic maximum occupancy so you know which tier applies. Read the free statutory guidance and the material on the ProtectUK website. Sit down with staff and agree simple procedures for evacuation, invacuation, lockdown and communication, and write them somewhere everyone can find them. Use the free ACT (Action Counters Terrorism) awareness training available online. If you are heading for enhanced tier, start on your documented assessment early so it is not a scramble in 2027. Almost all of this is time rather than money.
Indicative costs
Most standard tier preparation can be done in house at no cash cost. Where premises choose to bring in help, particularly at enhanced tier, the following gives a rough sense of the market. These figures are indicative only and are not a quote.
Prices vary by size, complexity and location, and the enhanced tier figures in particular depend heavily on the site. Always get a written proposal before committing.
Choosing help, if you need it
Because this is protective security rather than a single defined profession, there is no one badge to look for. Look for genuine, demonstrable experience in counter terrorism protective security or event safety, and be sceptical of anyone selling a “Martyn’s Law certificate” as if compliance were a product. A competent general health and safety or fire safety consultant with counter terrorism experience is often a sensible first port of call, and the same registers that signal competence elsewhere apply: membership of IOSH or IIRSM (the International Institute of Risk and Safety Management), with Chartered membership of IOSH (CMIOSH) as a marker of seniority, and qualifications such as NEBOSH. For anything touching fire, the BAFE SP205 scheme and individual registers such as the NFRAR are useful signposts. You can browse consultants on our fire safety listings and health and safety consultant pages.
Frequently asked questions
When does Martyn’s Law come into force?
The Act received Royal Assent on 3 April 2025, but the duties are not yet enforceable. The Government has committed to an implementation period of at least 24 months to give organisations time to prepare, so the duties are not expected to be enforced before spring 2027. The exact commencement date will be confirmed by regulations. Use the lead time to get ready rather than leaving it to the last minute.
Does Martyn’s Law apply to small businesses?
Only if 200 or more people may be present at the same time. Many small shops, cafes and offices will fall below that threshold and so are not caught by the main duties, although basic planning is still good practice. Work out your realistic maximum occupancy, including staff, to know where you stand.
Do I need to buy a Martyn’s Law certificate?
No. There is no official certificate and no requirement to purchase one to comply. The standard tier duties are procedural and can be met in house at little or no cost. Treat “certificate” sales pitches with caution.
What is the difference between standard and enhanced tier?
Standard tier applies where 200 to 799 people may be present and requires appropriate public protection procedures only. Enhanced tier applies where 800 or more may be present, and to qualifying events, and additionally requires a documented assessment and public protection measures such as monitoring, movement control and physical security, so far as reasonably practicable.
Who enforces Martyn’s Law?
The Security Industry Authority (SIA) is the regulator. Its approach is expected to focus on advice and support first, with enforcement powers including compliance notices, restriction notices and monetary penalties held in reserve for serious or persistent non compliance.
Does Martyn’s Law change my fire safety obligations?
No. Your duties under the Regulatory Reform (Fire Safety) Order 2005 are unchanged. Martyn’s Law sits alongside them. In practice your fire evacuation plan and your Martyn’s Law procedures should line up, and staff training can be combined, so a well run fire risk assessment is a good starting point.
Getting ready
Martyn’s Law is coming, but it is not a reason to panic or to spend money you do not need to. Work out your tier, put simple procedures in place, use the free training and guidance, and build on the fire safety arrangements you should already have. If you would value a hand, a competent consultant can help you prepare proportionately.
Browse our directory to find an experienced consultant who can help you prepare for Martyn’s Law and keep your wider fire and safety duties on track.
Want a specialist to handle it?
Our featured fire safety consultants are listed with their full range of services and can be contacted directly.
Find a fire safety consultant →