Martyn's Law: What you need to know

In this blog, I will discuss Martyn’s Law – a law that requires organisations to prepare for potential terrorist threats through structured security plans. With a tiered approach and continual support from the Security Industry Authority (SIA), public sector bodies must begin planning now to ensure compliance by 2027.  

What is Martyn’s Law?

Martyn’s Law, officially the Terrorism (Protection of Premises) Act 2025, is UK legislation designed to enhance public safety by mandating that certain public venues and events implement measures to prepare for and mitigate the risk of terrorist attacks. 

This law is named after Martyn Hett, a victim of the 2017 Manchester Arena bombing; the law was driven by his mother, Figen Murray, who has been campaigning to ensure better security preparedness across publicly accessible locations. 

The principle of this law is clear; educational institutions and other places that host large gatherings – such as big events, assemblies or council buildings – should have a structured plan in place to standardise security measures. The primary goal is to reduce risk and safeguard students, staff, and visitors in the unlikely event of a terrorist incident.

It’s about being prepared, not paranoid.

Why was Martyn’s Law introduced

The law addresses the evolving and unpredictable nature of terrorist threats in the UK, which the government considers “substantial.” Following the Manchester Arena attack, it became clear that many public venues and educational institutions lacked mandatory security measures to prepare for such incidents, and the public inquiry made it clear that something had to change.

Martyn’s Law allows us to learn from this tragedy, as it is specifically designed to ensure that everyone responsible for public spaces takes responsibility for safety – without making the process overly intricate or expensive. 

Martyn’s Law seeks to:

• Improve preparedness: Ensure venues, educational institutions and events have plans to respond effectively to terrorist attacks, such as evacuation, invacuation (sheltering in place), lockdown, and communication procedures.

• Reduce vulnerability: Require larger venues, buildings and events to take steps to mitigate the risk of attacks.

• Standardise security: Apply consistent security standards across qualifying premises and events, addressing gaps in current practices.

The legislation is part of the UK’s broader counter-terrorism strategy and was developed after extensive consultation with businesses, security experts, and victims’ groups.

When does Martyn’s Law come into effect?

While the law received Royal Assent on 3rd April 2025, it will not come into force until after a minimum 24-month implementation period, meaning it’s expected to come into full effect by April 2027. 

This period allows:

• The Security Industry Authority (SIA), the designated regulator, to establish its new regulatory functions.

• Businesses, event organisers and educational institutions to understand their obligations and prepare accordingly.

What does it actually require?

Martyn’s Law applies to qualifying premises such as councils, local government bodies, public venue operators and educational institutions. They will be required to:

• Assess and prepare for the risk of terrorist attacks.
• Implement protective measures appropriate to the size and nature of the premises or event.
• Engage with the Security Industry Authority (SIA), which will regulate compliance. 

The law uses a tiered system based on how many people are likely to be present:

• Standard Tier (200–799 people): You’ll need to notify the SIA that you're responsible for the premises and implement basic public protection procedures, such as:

o Lockdown and evacuation plans
o Staff training
o Communication protocols
o No physical security measures are required

• Enhanced Tier (800+ people): You’ll need to cover all standard tier requirements, plus:

o Physical security measures, such as CCTV, bag checks, and vehicle barriers
o A documented security plan submitted to the SIA
o Designation of a senior responsible individual

The Security Industry Authority (SIA) will serve as the regulatory body, supporting public sector organisations and educational institutions in understanding all the requirements. 

What does it mean for the public sector?

If you work in local government, education, leisure, or any other public-facing service, this law will likely affect you. Here’s what you’ll need to think about:

• Do your buildings or events fall under the law?
• What tier are they in?
• Do you have emergency plans and trained staff?
• Are you ready to work with the SIA on compliance?

For larger venues, there may be a need to invest in more robust security infrastructure such as CCTV systems, physical barriers and automated access control systems. 

For smaller sites, you can focus on developing precise security plans, training staff and volunteers and raising awareness among visitors and stakeholders around safety protocols. 

How to prepare

Although the law won’t come into effect for at least 24 months, public sector bodies and educational institutions should begin preparations now:

Immediate steps

• Identify qualifying premises and events under your control
• Conduct risk assessments using occupancy data and historical attendance
• Start drafting protection procedures tailored to each site
• Train staff on emergency response protocols
• Engage with ProtectUK and the National Protective Security Authority for free guidance and resources 

Planning Ahead

• Budget for potential security infrastructure upgrades (especially for enhanced tier sites)
• Develop internal policies and assign responsibilities
• Monitor updates from the Home Office and SIA as formal guidance is released

YPO’s Framework

Here at YPO, we offer the Building in Use - Support Services DPS - 879 Framework which is suitable for your smaller ad-hoc service requirements. This framework consists of several lots, including catering, security, CCTV, car park management and food hygiene inspection. This framework offers a flexible option for all public sector organisations, particularly local authorities, schools, colleges and universities.  

Martyn’s Law acts as a practical step to make sure that we’re able to anticipate any potential risks and challenges ahead of time so that we’re not caught off guard. For the public sector, this is the perfect opportunity to demonstrate leadership and long-term commitment to ensuring public safety.

For more relevant frameworks, visit our Facilities Management Frameworks area.

If you're enquiring for a school, please contact the dedicated education team at [email protected].