Martyn’s Law Summarised for Employers

• Martyn’s Law applies to premises and events open to the public with an expected attendance of at least 200 people.
• The law introduces a two-tier system: standard (200–799 attendees) and enhanced (800+ attendees). Enhanced tier venues must do more to comply.
• All affected venues must conduct a terrorism risk assessment and have an emergency response plan in place.
• Certain public-use buildings, including schools and places of worship, are automatically classified as standard tier, regardless of attendance.

Martyn’s Law is a direct response to the 2017 Manchester Arena bombing, which killed 22 people. The post-incident investigation found there were significant gaps in security at the venue, and the tragedy might have been preventable if stronger measures were in place.

Figen Murray, whose son Martyn Hett died in the attack, campaigned to raise awareness of these gaps and advocate for better security in public venues. Her efforts were recognised and resulted in the Terrorism (Protection of Premises) Bill, popularly known as Martyn’s Law.

The primary purpose of Martyn’s Law is to improve security in public spaces. Premises and events must now consider terrorism in their risk assessments and have emergency plans in place before they can open to the public. High-capacity venues must also implement proportionate security measures.

The Terrorism (Protection of Premises) Bill is sometimes referred to as the “Protect Duty” because the Bill builds on the “Protect” element of the government’s counter-terrorism strategy, CONTEST.

Since its inception, the Bill has become more widely known as Martyn’s Law in honour of the Manchester bombing victims. But some older sources may combine the two and refer to the Bill as Martyn’s Law (Protect Duty).

Martyn’s Law applies to premises and events in the UK that are:

• open to the public; and
• expect at least 200 attendees

The law covers both public and private sites, including pubs, restaurants, entertainment venues, retail spaces, sports stadiums, and transport hubs.

The law introduces a two-tier system based on site attendance:

• Standard Tier – Premises where between 200 – 799 people are reasonably expected to attend. Examples include restaurants, pubs, theatres, and cinemas.
• Enhanced Tier – Premises or events where 800 or more people are reasonably expected to attend. Examples include stadiums and large entertainment venues.

It’s important to note that tiers are based on expected attendance, not capacity. Larger venues won’t have to meet enhanced duties if they don’t actually host more than 800 people at one time.

Standard tier venues must assess the risk of terrorist attacks and implement basic security procedures.

Under Martyn’s Law, operators of standard tier venues or events must:

• Conduct a terrorism risk assessment
• Provide basic security awareness training for staff
• Develop a simple plan for responding to a terrorist attack

The purpose of Martyn’s Law at this level is to ensure that premises take proportionate steps to protect staff and visitors. These requirements are designed to be practical and low-cost for smaller businesses, so physical security measures aren’t mandatory.

Enhanced tier venues are expected to implement more extensive protections. More people on site means risks are higher, so security measures and emergency plans must be scaled accordingly.

Under Martyn’s Law, operators of enhanced tier venues must:

• Conduct a detailed terrorism risk assessment
• Implement formal security plans based on identified risks
• Provide specialist training for staff to respond to attacks
• Introduce proportionate physical security measures where necessary

The purpose of Martyn’s Law at this level is to ensure that venues with high footfall take proportionate steps to protect visitors. The protection of premises at this scale requires a structured approach, with clear procedures in place and effective oversight.

Certain public-use buildings are automatically considered standard tier venues, so must comply with Martyn’s Law, regardless of expected attendance levels.

These designated standard tier venues include:

• Places of worship (unless admission is paid)
• Universities and other higher-education facilities
• Childcare facilities
• Secondary schools
• Primary schools

Under Martyn’s Law, compliance falls to the responsible person – the individual (or organisation) that owns or has control over a premises or event.

This duty holder is accountable for implementing the required security measures to protect the public from potential terrorist threats.​

• Multi-Use facilities: In venues with multiple operators (e.g., shopping centres), each business is responsible for its own unit. However, the overarching property manager or landlord will also have duties regarding common areas.​
• Temporary events: Event organisers are responsible for implementing appropriate security measures for the event’s duration.​
• Public buildings: For publicly owned spaces, the relevant government department or agency acts as the responsible person.

The Security Industry Authority (SIA) has been designated as the regulator responsible for enforcing Martyn’s Law. This new function expands the SIA’s existing role in safeguarding the public through its oversight of the private security industry. ​​

Under Martyn’s Law, responsible persons will be required to notify the SIA of their premises or event. Registration ensures that the SIA can oversee compliance and provide necessary support.

Understanding Martyn’s Law is essential for businesses and organisations responsible for public venues.

Our online Martyn’s Law Training course provides a structured overview of the legislation and its key requirements. This IIRSM-approved course outlines:

• Where Martyn’s Law applies
• Requirements for standard and enhanced tier venues
• Conducting risk assessments and developing emergency plans
• Mandatory security measures for all venues

Enrol now and learn steps to make your venue safer and compliant with Martyn’s Law.