The following questions and answers are based solely on the Terrorism (Protection of Premises) Act 2025 and the Home Office statutory guidance issued under section 27 of the Act (April 2026). They are intended to help organisations understand their obligations. They do not constitute legal advice. For guidance specific to your premises, contact Team 9.

What is Martyn’s Law? Martyn’s Law is the common name for the Terrorism (Protection of Premises) Act 2025. It received Royal Assent on 3 April 2025 and is named in recognition of Martyn Hett, one of the 22 victims of the Manchester Arena attack in 2017. The Act requires those responsible for certain premises and events to take steps to reduce the risk of physical harm to individuals from acts of terrorism.

Which premises does it apply to? The Act applies to premises that can reasonably be expected to have a maximum of 200 or more individuals — including staff — at the same time, and which are used for one or more of the qualifying purposes listed in Schedule 1 of the Act. These include hotels, food and drink venues, entertainment and leisure, retail, health care, education, places of worship and public authorities, among others.

What are the two tiers? Standard tier covers premises with a capacity of 200 to 799 people. Enhanced tier covers premises with a capacity of 800 or more. Qualifying events are subject to the same requirements as enhanced tier premises regardless of where they are held.

Who is the Responsible Person? The Responsible Person is the individual or organisation that has control of the qualifying premises for its Schedule 1 use. Where the Responsible Person is a company or organisation — rather than an individual — and the premises are enhanced tier, they must designate a named senior individual to ensure the Act’s requirements are met. That senior individual must be in a sufficiently senior position. The Responsible Person and senior individual can delegate tasks but cannot delegate overall legal responsibility.

What must standard tier premises do? Standard tier premises must have public protection procedures in place — these are procedures to reduce the risk of physical harm to individuals in the event of a terrorist attack at or near the premises. Staff who work at the premises must be trained on those procedures. The responsible person must also notify the SIA that they are responsible for the premises.

What additional requirements apply to enhanced tier premises? Enhanced tier premises must meet all standard tier requirements and additionally must implement reasonably practicable public protection measures to reduce vulnerability to terrorism, produce and maintain a written compliance document, and designate a named senior individual. The compliance document must be submitted to the SIA.

Who is the regulator? The Security Industry Authority (SIA) is the regulator responsible for enforcing the Act. The SIA has powers to gather information, inspect premises, issue compliance notices and restriction notices, and impose financial penalties. The SIA’s approach is set out in its statutory section 12 guidance, published in draft in April 2026.

What are the penalties for non-compliance? The SIA can issue penalty notices requiring payment of a financial penalty. For standard tier premises the maximum financial penalty is £10,000, with daily penalties of up to £500. For enhanced tier premises the maximum is £18 million or 5% of worldwide revenue, whichever is higher, with daily penalties of up to £50,000. Failure to comply with a compliance notice at enhanced tier is also a criminal offence carrying up to two years imprisonment.

Can legal responsibility be delegated? No. The Act is explicit on this point. The Responsible Person and any designated senior individual can delegate tasks to others, but they cannot delegate overall legal responsibility. If something goes wrong, the named individual remains personally liable.

Does the Act apply across the whole UK? Yes. The Terrorism (Protection of Premises) Act 2025 applies in England, Wales, Scotland and Northern Ireland.

Does Martyn’s Law replace other legislation? No. The Act does not supersede existing legislation. Those with obligations under the Act may also have duties under health and safety, fire safety, licensing and equality legislation. The statutory guidance is clear that all applicable legislation must be complied with.

When does the Act come into force? The Act received Royal Assent in April 2025. The Home Office statutory guidance was published in April 2026. The SIA’s section 12 regulatory guidance is currently in public consultation. The commencement date for the substantive requirements has not yet been confirmed. Team 9 recommends organisations begin preparing now — the compliance window will not be long once a date is set.