Martyn’s Law: What it means for you (without the legal jargon)

What is Martyn’s Law?

Martyn’s Law, formally the Terrorism (Protection of Premises) Act 2025,¹ is intended to “improve organisational preparedness and protective security across the UK” and requires those responsible for premises to “prepare for potential terrorist attacks and help keep people safe in the event of an attack.”¹ᵃ

Martyn’s Law received Royal Assent on 3 April 2025, becoming the Terrorism (Protection of Premises) Act 2025. The Government has indicated there will be an implementation period of at least 24 months from that date before the Act comes into force. This means there is currently no legal requirement to comply until commencement, although organisations that may fall within scope may wish to use this period to understand the requirements and prepare proportionately.²

In simple terms, it is about improving preparedness, so businesses are better placed to act quickly and effectively if an incident occurs.

Who is likely to be affected?

The law applies across the UK and introduces a tiered approach based on the number of people reasonably expected to be present:³

• 200–799 people (Standard tier) The standard tier applies to premises that can reasonably expect between 200 and 799 individuals to be present. Requirements are centred on “simple, low-cost activities” to help reduce harm and save lives.
• 800+ people (Enhanced tier) The enhanced tier applies to premises that expect 800 or more individuals to be present.

What it’s really about

Martyn’s Law is designed to be risk-based and proportionate, requiring organisations to take reasonably practicable steps based on their size, activities and risk profile.

There is no fixed list of security measures. Instead, organisations are expected to demonstrate that they have:

• Thought about the risks
• Put appropriate procedures in place
• Made informed, reasonable decisions

Why this matters for businesses

The legislation increases expectations around:

• Preparedness and response planning
• Staff awareness and procedures
• Accountability for decision-making and risk management

As Martyn’s Law moves towards implementation, organisations should expect greater scrutiny of how decisions are made and documented, particularly for public-facing premises. This matters not only because of preparedness and duty of care, but also because the Act introduces a regulatory framework, with the Security Industry Authority (SIA) responsible for assessing compliance and using enforcement powers where required.⁴

Enforcement, penalties and the SIA’s role

Compliance will be overseen by the Security Industry Authority (SIA), which will act as the regulator for Martyn’s Law. The SIA’s role is expected to include helping those responsible for qualifying premises and events understand their duties, assessing compliance, identifying non-compliance and bringing premises or events into compliance where required.⁴,⁵

The enforcement regime is an important part of the “why does this matter?” question. Potential financial penalties for non-compliance could be significant, with penalties of up to £18 million or 5% of worldwide revenue. The SIA has also indicated that its approach will be risk-based and proportionate, with compliance assessments that may include desk-based reviews and on-site inspections.⁴,⁵

For businesses, this reinforces the importance of keeping clear records of decisions, responsibilities and the rationale for any measures adopted. The focus is likely to be on whether reasonable, proportionate steps have been considered and documented, rather than whether every possible security measure has been implemented.

Where risk management and liability fit in

Martyn’s Law is not an insurance requirement, but it is relevant to how organisations manage risk, accountability and potential liability.

It reinforces the expectation that organisations take reasonable steps to prepare for and reduce the impact of an incident, which may be relevant to how liability and management exposures are considered.

Businesses should consider how the legislation interacts with:

• Duty of care and liability exposure
• Management responsibilities and decision-making
• Public liability and employers’ liability considerations
• Crisis response, continuity and incident management planning

Not all costs are insurable

Some impacts, such as reputational damage, operational disruption or crisis management costs, may not be fully addressed by insurance. This reinforces the importance of preparation, documented procedures and clear responsibility for decision-making.

What can businesses do now?

You don’t need to wait for full implementation to take action. Practical steps include:

• Confirm whether your premises fall within scope (200+ capacity)
• Put in place basic response procedures (e.g., evacuation, lockdown, communication)
• Ensure staff understand how to respond in an emergency
• Review whether your risk management, incident response, governance and record-keeping arrangements are aligned
• Consider whether liability, management and regulatory exposures are understood and documented

Taking early, proportionate steps can improve resilience, support compliance planning and help businesses evidence the decisions they have made.

For many businesses, the key point is not whether they need expensive security measures, but whether they can show they have considered the risks and put proportionate procedures in place.

Speak to your broker

If you operate public-facing premises and want to understand how Martyn’s Law could affect your risk profile, speak to your broker. A broker can help you:

• Consider whether liability and management exposures have been reviewed
• Discuss whether your insurance arrangements remain appropriate for your risk profile and operational reality
• Support a joined-up approach to compliance, risk management and insurance considerations

A review today may help your business identify practical steps and evidence proportionate decision-making as the legislation takes effect.

Talk to us

Call us on 01274 515747, email mail@lwood.co.uk, or drop by. We’re here Monday to Friday, 8:30am to 5pm.