Navigating Martyn’s Law Requirements: What Your Venue Needs to Know

The security landscape of the United Kingdom is undergoing its most significant transformation in decades. For business owners, event organisers, and site managers, the introduction of the Terrorism (Protection of Premises) Act 2025 represents a major shift in operational responsibility. Widely known as Martyn’s Law, this legislation is named after Martyn Hett, who tragically lost his life in the 2017 Manchester Arena attack. The law establishes a statutory duty for those in control of certain premises and events to take proportionate steps to improve public safety and preparedness. As a Social Enterprise (CIC) dedicated to public safety over profit, GTS Solutions is committed to helping organisations understand these new obligations. This guide focuses on the specific Martyn’s law requirements that will soon become a mandatory part of running a public-facing venue.

Understanding the Scope of the Legislation

Before diving into the technical details, it is essential to determine if your premises fall under the new legal framework. The law applies to “qualifying public premises” which include a vast array of sectors such as retail, hospitality, health, education, and entertainment. Essentially, if your building or land is used for a qualifying activity and meets certain capacity thresholds, you are a duty holder. The threshold for falling into the scope of the Act begins at a capacity of 200 people. This capacity is calculated based on the number of individuals reasonably expected to be present at the same time, including staff and volunteers.

The legislation is designed to be proportionate to the size and nature of the venue. This ensures that a small community hall does not face the same financial or administrative burden as a premier league football stadium. However, regardless of the size, the underlying goal remains the same: to ensure that every venue has a basic level of preparedness to respond effectively should a terrorist incident occur. Navigating these Martyn’s law requirements starts with identifying which of the two tiers your premises sit within, as this dictates your specific legal duties.

The Standard Tier: Procedures for Smaller Venues

The Standard Tier applies to premises with a capacity of between 200 and 799 individuals. For these locations, the focus is on low-cost, simple activities that can significantly reduce harm and save lives. The primary expectation is not for venues to invest in expensive physical security equipment like bollards or metal detectors. Instead, the emphasis is on organisational preparedness and staff awareness. You must ensure that anyone working at your premises is trained to recognize potential threats and knows exactly what to do when an alert is raised.

Under the Standard Tier, the Martyn’s law requirements involve creating a clear preparedness plan. This plan must cover the “four pillars” of emergency response: evacuation, invacuation, lockdown, and communication. Staff must be familiar with the physical layout of the building to guide the public to safety, understand how to secure the premises to delay an attacker, and know how to alert the authorities and everyone on-site quickly. Simple actions, such as knowing which doors can be locked from the inside or identifying “safe rooms” for invacuation, form the backbone of compliance for standard tier venues.

The Enhanced Tier: Rigorous Safety Measures for Large Venues

For venues and ticketed events with a capacity of 800 or more people, the requirements become significantly more robust. The Enhanced Tier recognizes that higher-capacity locations are more likely to be targeted or suffer greater casualties in an attack. Therefore, the Martyn’s law requirements for these premises include all the procedural duties of the Standard Tier, plus several additional layers of security management. This includes the mandatory appointment of a “Designated Senior Individual” who is responsible for ensuring the organisation meets its legal obligations.

Enhanced duty holders must conduct a comprehensive risk assessment that identifies specific vulnerabilities to terrorism. Based on this assessment, you are required to implement “reasonably practicable” physical security measures. These might include enhanced CCTV monitoring, bag search policies, or vehicle mitigation systems. Furthermore, these venues must document their security plans in detail and submit them to the Security Industry Authority (SIA), which serves as the official regulator. The goal is to create a culture of vigilance where security is integrated into the daily operations of the venue rather than being an afterthought.

The Role of the Regulator and Penalties for Non-Compliance

The Security Industry Authority (SIA) has been tasked with overseeing the implementation and enforcement of Martyn’s Law. Their role is not just to police venues but to provide guidance and support to help duty holders achieve compliance. The SIA will have the power to inspect premises, request documentation, and issue notices for improvement. While the regulator’s priority is to advise and assist, they are equipped with significant enforcement powers to address serious or persistent failures to meet Martyn’s law requirements.

Failing to comply with the Act can lead to severe consequences. For Standard Tier premises, non-compliance could result in fixed penalty notices. However, for Enhanced Tier premises, the stakes are much higher. Penalties can reach up to £18 million or 5% of a business’s global revenue, whichever is higher. Beyond the financial impact, the reputational damage of being found legally negligent in public safety could be irreparable. More importantly, the law serves as a reminder that the cost of preparedness is always lower than the cost of a tragedy.

Practical Steps to Start Your Compliance Journey

Although there is a transition period of at least 24 months from the Act receiving Royal Assent in April 2025, venues are encouraged to act now. Waiting for the final enforcement date can lead to rushed plans and inadequate training. Start by assessing your venue’s capacity using fire safety data or historical attendance records to confirm your tier. Once you know your tier, you can begin reviewing your existing emergency procedures. Do your current fire evacuation plans consider what would happen if a fire exit was blocked by a threat outside?

Education is the most powerful tool in your security arsenal. Free resources are available through the ProtectUK platform, including the Action Counters Terrorism (ACT) e-learning modules. Encouraging your staff to complete these modules is a simple, no-cost way to satisfy the training aspects of the Martyn’s law requirements. Additionally, engaging with security professionals who understand the social impact of safety, such as GTS Solutions, can provide you with a tailored roadmap to compliance that respects your budget and your mission. By taking these steps today, you are not just ticking a box for a regulator; you are making a tangible commitment to the safety of your community.

Frequently Asked Questions (FAQs)

What is the minimum capacity for a venue for Martyn’s Law requirements to apply?

The law applies to qualifying public premises with a capacity of 200 people or more. Premises with a capacity below this threshold are not legally bound by the Act, though they are still encouraged to follow best practices for public safety.

Do I need to buy expensive security equipment to comply?

For Standard Tier venues (200 to 799 capacity), there is no legal requirement to purchase physical security hardware. The focus is on procedures, training, and awareness. Enhanced Tier venues must implement physical measures only where they are deemed “reasonably practicable” and proportionate.

Who is the “Responsible Person” according to the legislation?

The “Responsible Person” is typically the individual or entity that has control over the premises or the event. This usually refers to the venue operator or the business owner who manages the day-to-day activities of the site.

What are the “four pillars” of the required emergency procedures?

The four pillars are Evacuation (getting people out), Invacuation (moving people to a safe place inside), Lockdown (securing the site against an intruder), and Communication (alerting staff and the public to the danger).

How will the SIA check if my venue is compliant?

The SIA will function as the regulator, conducting inspections and reviewing the security documentation submitted by Enhanced Tier venues. They will look for evidence of staff training, documented risk assessments, and robust emergency procedures.

Can a social enterprise help me with my security needs?

Yes, GTS Solutions is a Community Interest Company that provides professional security services and training. Choosing a CIC ensures that your investment in security also supports community initiatives and employability programmes.