Martyn’s Law, formally known as the Terrorism (Protection of Premises) Act 2025, introduces new legal responsibilities for businesses and organisations that operate publicly accessible premises. While the legislation has now passed, enforcement is expected from 2027, giving businesses a limited window to understand what is required and put appropriate measures in place.
The purpose of the legislation is to improve how organisations prepare for and respond to potential terrorist incidents. It has been developed in response to past events and reflects a growing expectation that venues and public spaces take a more structured approach to risk management. This represents a shift from guidance to legal obligation, with clear expectations around planning, training and preparedness.
The law applies to a wide range of premises, including venues such as hospitality sites, entertainment spaces, retail environments and any location where members of the public gather. The requirements are structured in a tiered approach, meaning that the level of obligation will depend on factors such as the size of the venue and the number of people it accommodates. Smaller premises will have lighter requirements, while larger venues will be expected to implement more comprehensive measures.
At its core, the legislation focuses on preparation. Businesses are expected to understand the risks relevant to their environment and to take proportionate steps to address them. This includes developing clear plans for how to respond in the event of an incident, ensuring that staff are aware of those plans and maintaining appropriate documentation to demonstrate compliance.
Risk assessment is a fundamental part of this process. Organisations will need to consider how their premises could be affected by potential threats and what measures can be put in place to reduce vulnerability. This does not require specialist security expertise in every case, but it does require a structured approach that is regularly reviewed and updated.
Training is another key requirement. Staff should understand their role in responding to an incident and be familiar with procedures such as evacuation, communication and coordination with emergency services. This is not limited to management teams. Frontline staff, who are often the first to respond in any situation, must also be prepared. The effectiveness of these measures will depend on how well they are understood and applied in practice.
Documentation and record keeping will play an important role in demonstrating compliance. Businesses will need to show that risk assessments have been carried out, that training has been delivered and that plans are in place and maintained. This aligns with broader expectations under health and safety legislation, where the ability to evidence actions is as important as the actions themselves.
One of the challenges for many organisations is that this type of planning has not traditionally been part of day to day operations. While health and safety processes are well established, the specific focus on preparedness for deliberate threats introduces new considerations. This may require businesses to review their existing systems and integrate additional elements to ensure that all requirements are covered.
The timeline for implementation provides an opportunity to prepare, but it is relatively short in practical terms. Developing risk assessments, delivering training and embedding processes across an organisation takes time, particularly for businesses with multiple sites or complex operations. Leaving preparation until the final stages may result in a rushed approach and increased risk of gaps.
There is also a wider benefit to taking action early. The measures required under Martyn’s Law are not solely about compliance. They contribute to a broader culture of preparedness and awareness, which can be valuable in a range of situations beyond those specifically addressed by the legislation. Businesses that invest in these areas are likely to improve their overall resilience.
As enforcement approaches, it is expected that scrutiny will increase, particularly in sectors where large numbers of people gather. Organisations will need to be able to demonstrate that they have considered the requirements and taken appropriate steps. This is likely to form part of inspections and regulatory oversight in the future.
Martyn’s Law represents a clear shift in expectations for businesses operating public spaces. By understanding what is required and taking a structured approach to preparation, organisations can ensure that they are ready for implementation and able to meet their obligations with confidence.
