Martyn's Law, explained
Martyn's Law — the Terrorism (Protection of Premises) Act 2025 — will require many venues and events to be better prepared for a terrorist attack. This guide sets out who it applies to, the two tiers, the procedures and measures, and when it is expected to take effect.
Where the law stands
The Terrorism (Protection of Premises) Act 2025 has passed, but its duties are not yet in force. The government expects the Act to come into force in spring 2027, with an implementation period of at least 24 months so those in scope can prepare and the regulator can publish guidance. The named regulator is the Security Industry Authority (SIA). This is a good window to confirm your tier and get procedures, training and drills recorded.
Legal basis — Terrorism (Protection of Premises) Act 2025 · Regulator — Security Industry Authority (SIA) · Status — passed; expected in force spring 2027 (confirm the exact date with GOV.UK/SIA)
The two tiers
Standard tier
Notify the SIA of the responsible person and put in place appropriate public protection procedures, so far as reasonably practicable: evacuation, invacuation, lockdown and communication. The focus is simple, low-cost procedures that could reduce harm in an attack.
Enhanced tier
Everything in the standard tier, plus appropriate public protection measures to reduce the premises' vulnerability: monitoring, movement, physical security and information security. Enhanced premises and qualifying events must also document their procedures and measures and provide that documentation to the SIA.
Tiers and duties — Terrorism (Protection of Premises) Act 2025 and GOV.UK/SIA guidance
Special tier considerations
The 200–799 and 800+ bands are the headline rule, but tier depends on the premises' use as well as capacity. Childcare and early-years, primary, secondary and further education settings, and places of worship, stay in the standard tier even at 800 or more people. Higher education (universities) does not get this exception and moves to the enhanced tier at 800+. Whether Martyn's Law applies at all depends on the premises having a qualifying use under Schedule 1 of the Act and not being excluded.
Special considerations — GOV.UK "Martyn's Law for education settings" and SIA guidance · Qualifying uses/exclusions — Terrorism (Protection of Premises) Act 2025, Schedule 1
How to prepare — and how Complys helps today
Underneath Martyn's Law is a familiar compliance shape: work out your tier, decide the procedures (and, for enhanced, measures), train your people, record the evidence, and review it. Complys can already help with the record-keeping side today — holding your procedures and plans as versioned documents, tracking staff training and drills, logging incidents, and keeping review dates with reminders. A dedicated Martyn's Law workspace — tier, procedures, measures and evidence pack in one place — is a potential future Complys product, not something we provide today.
Martyn's Law — FAQs
Is Martyn's Law in force yet?
Not yet. The Terrorism (Protection of Premises) Act 2025 has passed, but the duties are not yet in force — the government expects the Act to come into force in spring 2027, with at least a 24-month implementation period so organisations can prepare. Use the time to understand which tier you fall into and to get your procedures and training records in order.
Which premises does it apply to?
Qualifying premises and events where the public has access and a qualifying number of people may be present. There are two tiers: the standard tier for premises with 200–799 people present at the same time, and the enhanced tier for premises (and qualifying events) with 800 or more. Some uses have special treatment — childcare, primary, secondary and further education and places of worship stay in the standard tier even at 800+, while higher education does not. The premises must also have a qualifying use under Schedule 1 of the Act and not be excluded.
What is the difference between the standard and enhanced tiers?
Standard-tier premises must notify the regulator and put in place appropriate public protection procedures — evacuation, invacuation (moving people to safety inside), lockdown and communication — so far as reasonably practicable. Enhanced-tier premises and events must do that and also put in place public protection measures (monitoring, movement, physical security and information security), document their procedures and measures, and provide that documentation to the regulator.
Who is the regulator?
The Security Industry Authority (SIA) is the regulator for Martyn's Law, responsible for helping those in scope comply and for enforcement. Responsible persons will notify the SIA.
Does Complys provide a Martyn's Law module?
Not as a dedicated module today. Complys can already hold the kinds of records these duties rely on — procedures, staff training and drills, and evidence with review dates — using its existing document, training and records tools. A dedicated Martyn's Law workspace is a potential future Complys product; we will not claim one exists before it does.
Explore: Martyn's Law tier checker, hospitality compliance, training matrix software, incident reporting, and policy management.