Terrorism Protection of Premises Act 2025
The duty on qualifying premises and events to reduce vulnerability to terrorist attack
The Terrorism Protection of Premises Act 2025, known as Martyn's Law after Martyn Hett who died in the 2017 Manchester Arena attack, places legal duties on those responsible for qualifying premises and events. Once commenced (expected April 2027), the Act creates two tiers based on capacity: standard tier (200 to 799) requires public protection procedures and notification; enhanced tier (800+) adds documented public protection measures, training, and evaluation. The SIA is the named regulator. Operators have a legal duty to take reasonably practicable steps to reduce vulnerability and the risk of harm.
Key Requirements
Standard tier (capacity 200 to 799)
Standard tier premises must take reasonably practicable steps to reduce vulnerability to acts of terrorism. This includes notifying the regulator, having public protection procedures, and ensuring staff know how to follow them.
Enhanced tier (capacity 800+)
Enhanced tier premises must do everything required at standard tier, plus document public protection measures, train workers, and evaluate the measures regularly. Documentation must be available to the regulator.
The four legal pillars (enhanced tier)
Enhanced tier premises must address: (1) evacuation procedures, (2) invacuation procedures (where to take people who cannot evacuate safely), (3) lockdown procedures, and (4) communication with people on the premises.
Senior individual responsibility
The Act places the duty on the person responsible for the premises or event. For enhanced tier, a senior individual must be designated to ensure the duties are met.
What Your Business Must Do
1. Determine your tier based on capacity
Calculate the capacity at full use. If 200 to 799, you are standard tier. If 800 or more, you are enhanced tier. Capacity is total people on premises (including staff and visitors), not just licensed capacity.
2. Conduct a public protection risk assessment
Identify the types of attack that could affect your premises (vehicle ramming, edged weapons, firearms, IED, marauding terrorist attack) and the reasonably practicable steps you can take.
3. Develop public protection procedures
Procedures for evacuation, invacuation, lockdown, and communication. Standard tier needs procedures; enhanced tier needs documented measures and training.
4. Train staff (enhanced tier)
Staff must know what to do under each procedure. Training must be appropriate to their role and refreshed regularly.
5. Notify the regulator
When the Act commences, notify the SIA that your premises is in scope. Stay registered as your capacity or activities change.
Penalties for Non-Compliance
Failure to comply with duties (standard tier)
Compliance notice; in serious cases, monetary penalty
Failure to comply with duties (enhanced tier)
Compliance notice; monetary penalty up to £18 million or 5% of qualifying worldwide revenue, whichever is higher
Failure to comply with regulator notice
Daily fines for continued non-compliance
How Paddl Helps
Martyn's Law Readiness Checker
Free tool that scores your premises against the four legal pillars and tells you what to add. Tied to your tier (standard or enhanced) based on capacity.
Public protection risk assessment
AI-generated risk assessment covering vehicle ramming, edged weapons, firearms, IED, and marauding terrorist attacks, with reasonably practicable steps for your venue type.
Procedure documentation
Store evacuation, invacuation, lockdown, and communication procedures in one place. Acknowledge digitally with all staff.
Training records
Track staff training on Martyn's Law procedures with completion dates and refresh schedules. Critical for enhanced tier evidence.
Incident reporting
When an incident occurs, structured records with police reference and evidence support both internal review and regulator notification.
Frequently Asked Questions
When does Martyn's Law take effect?
The Terrorism Protection of Premises Act 2025 received Royal Assent on 3 April 2025. Commencement is expected to be April 2027, with a 24-month implementation window from Royal Assent to give venues time to prepare. Standard tier (200 to 799 capacity) and enhanced tier (800+) will both come into force together.
What is the difference between standard tier and enhanced tier?
Standard tier (capacity 200 to 799) requires reasonably practicable public protection procedures and regulator notification. Enhanced tier (capacity 800+) adds documented public protection measures, staff training, regular evaluation, and a designated senior individual. Penalties at enhanced tier are significantly higher.
What are the four legal pillars?
For enhanced tier premises, public protection measures must address four pillars: (1) evacuation procedures (getting people out safely), (2) invacuation procedures (taking people somewhere safer when evacuation is not safe), (3) lockdown procedures (preventing entry), and (4) communication (alerting people on the premises). Standard tier premises must have appropriate procedures aligned with these pillars but at a lower documentation burden.
How do I work out my capacity for Martyn's Law?
Capacity for Martyn's Law is the total number of people who may be present at the same time, including staff, visitors, and contractors. It is not the same as licensed capacity, which is set under the Licensing Act 2003. If your full-use capacity is 200 to 799, you are standard tier. 800 or more, enhanced tier.
Stay compliant with Martyn's Law
Paddl makes regulatory compliance simple. Digital records, automated reminders, and audit-ready documentation - all in one platform built for UK hospitality.