Martyn's Law FAQs for UK Businesses
Martyn's Law is the common name for the Terrorism (Protection of Premises) Act 2025. It received Royal Assent on 3 April 2025 and is expected to come into force in Spring 2027, after an implementation period of at least 24 months. The Security Industry Authority (SIA) is the regulator, and there is no legal duty to comply until commencement.
The Act creates two tiers of duty based on how many people, including staff, may reasonably be expected to be present at the same time. Standard duty applies from 200 to 799, and enhanced duty applies at 800 or more. Standard tier requires public protection procedures; enhanced tier adds public protection measures, a designated senior individual and a compliance document provided to the SIA.
This page answers the questions premises operators ask most often. For the full picture, read our Martyn's Law 2027 compliance guide, and see the government's section 27 statutory guidance, published on 15 April 2026.
Quick Reference: Standard vs Enhanced Duty
| Item | Standard duty (200 to 799) | Enhanced duty (800 or more) |
|---|---|---|
| Public protection procedures (s.5) | Required | Required |
| Public protection measures (s.6) | Not required | Required |
| Designated senior individual | Not required | Required |
| Compliance document to the SIA | Not required | Required |
| Maximum penalty | £10,000 (up to £500 per day) | £18 million or 5% of qualifying worldwide revenue (up to £50,000 per day) |
The Headline Facts
Standard duty premises must put in place appropriate, reasonably practicable public protection procedures across four areas defined in section 5: evacuation, invacuation (moving people to safety inside the premises), lockdown, and communication. These are expected to be simple and low cost, with no requirement to buy equipment.
Enhanced duty premises and qualifying events must, in addition, put in place public protection measures across four categories in section 6: monitoring the premises, the movement of individuals, physical safety and security, and security of information. They must also designate a senior individual responsible for compliance and prepare a compliance document for the SIA.
Education settings remain in the standard tier regardless of capacity, where they are above the 200 threshold.
What Premises Operators Must Do
- Assess your capacity against peak use, counting everyone including staff, to establish which tier applies.
- Decide whether you fall into the standard or enhanced duty, or out of scope below 200.
- Document your public protection procedures across evacuation, invacuation, lockdown and communication.
- Prepare public protection measures and a compliance document if you are in the enhanced tier.
- Designate a senior individual responsible for compliance where the enhanced duty applies.
Common Errors to Avoid
- Counting only customers or visitors and leaving staff out of the capacity figure.
- Assessing capacity against an average day rather than peak use, when occasional higher-attendance events can bring premises into scope.
- Assuming a large education setting falls into the enhanced tier, when education settings remain standard tier regardless of capacity.
- Treating Spring 2027 as a reason to wait, when capacity assessment and documentation take time to get right.
Enforcement and Penalties
The SIA can use compliance notices, restriction notices and monetary penalties to enforce the Act. Standard duty premises face a maximum penalty of £10,000, with daily penalties up to £500. Enhanced duty premises and qualifying events face a maximum of £18 million or 5% of qualifying worldwide revenue, whichever is greater, with daily penalties up to £50,000.
The SIA's draft section 12 statutory (enforcement) guidance is out for consultation, closing at 11:59pm on Friday 12 June 2026. You can read more about the SIA section 12 consultation on GOV.UK.
How Policy Pros Can Help
Policy Pros writes the documentation Martyn's Law requires, tailored to your premises rather than pulled from a template. Our Martyn's Law compliance documentation service covers capacity assessments, public protection procedures and enhanced-tier compliance documents.
For tier-specific detail, see our guides on standard tier procedures and the enhanced tier compliance document. If you are unsure which tier applies, start with our capacity assessment guide.
Frequently Asked Questions
Is Martyn's Law in force yet?
No. The Terrorism (Protection of Premises) Act 2025 received Royal Assent on 3 April 2025, but there is an implementation period of at least 24 months. The Act is expected to come into force in Spring 2027, and there is no legal duty to comply until commencement.
When does Martyn's Law start?
Commencement is expected in Spring 2027, following the implementation period of at least 24 months from Royal Assent on 3 April 2025. Until the Act comes into force, there is no legal requirement to comply, although preparation can begin now. The section 27 statutory guidance was published on 15 April 2026.
What is the 200 threshold in Martyn's Law?
The 200 figure is the point at which the standard duty begins to apply. It counts the number of individuals, including staff, who may reasonably be expected to be present at the same time. Capacity should be assessed against peak use, so occasional higher-attendance events can bring premises into scope.
What is the difference between standard and enhanced duty under Martyn's Law?
Standard duty applies to premises with a capacity of 200 to 799 and requires public protection procedures across evacuation, invacuation, lockdown and communication. Enhanced duty applies at 800 or more and adds public protection measures across four categories, a designated senior individual responsible for compliance, and a compliance document provided to the SIA.
What are the penalties for non-compliance with Martyn's Law?
For standard duty premises the maximum penalty is £10,000, with daily penalties up to £500. For enhanced duty premises and qualifying events the maximum is £18 million or 5% of qualifying worldwide revenue, whichever is greater, with daily penalties up to £50,000. The SIA can also use compliance notices and restriction notices.
Who is the regulator for Martyn's Law?
The Security Industry Authority (SIA) is the regulator for Martyn's Law. It will enforce the Act using compliance notices, restriction notices and monetary penalties. The SIA's draft section 12 enforcement guidance is out for consultation, closing at 11:59pm on Friday 12 June 2026.
Do education settings count under Martyn's Law?
Yes, education settings above the 200 threshold are in scope, but they remain in the standard tier regardless of capacity. This means they must put in place public protection procedures, but they are not subject to the additional enhanced duty requirements that would otherwise apply at 800 or more.
What is a Martyn's Law compliance document?
A compliance document is required only for enhanced duty premises and qualifying events. It records the public protection procedures and measures in place, along with an assessment of how they reduce vulnerability and the risk of harm. The enhanced premises must prepare this document and provide it to the SIA.
Does Martyn's Law apply to my venue?
It applies if your premises may reasonably be expected to have 200 or more people present at the same time, counting everyone including staff. Below 200 you fall outside the duty, between 200 and 799 you are standard tier, and at 800 or more you are enhanced tier. Assess your capacity against peak use to decide which applies.
