The Terrorism (Protection of Premises) Act 2025: what it means for premises owners and event organisers

In response to recommendations from public inquiries into the 2017 Manchester Arena bombing and the London  Bridge attacks, the UK government introduced the Terrorism (Protection of Premises) Act 2025, commonly referred to as Martyn’s Law, in tribute to Martyn Hett, a victim of the Manchester Arena attack. The Act received royal assent on 3 April 2025, but its main provisions are not due to take effect for at least two years. 

What is Martyn’s Law?

Martyn’s law introduces new legal duties for persons responsible for certain premises and events across the UK to prepare for potential terror attacks and to improve public safety. The law aims to create greater consistency in how public spaces and venues manage terror-related risks. Historically, the level of preparedness for terrorism has fallen behind other legally required activities such as Health and Safety. The Act seeks to close this gap.

Who does the law apply to?

The Act applies to those responsible for “qualifying premises” and “qualifying events”. Qualifying premises are those used for specific activities listed in the Act and where it is reasonable to expect 200 or more individuals to be present at any one time. These may include shops, restaurants, gyms, sports grounds, educational institutions and hotels. 

Qualifying Premises become “enhanced duty premises” when 800 or more individuals are expected to be present, otherwise they are standard duty premises.

Qualifying events are public events, such as concerts and exhibitions, where 800 or more individuals are expected to be present on the premises and access is controlled, for example by tickets or passes.

Duties for responsible persons

Those responsible for qualifying premises or events must, so far as reasonably practicable, ensure that appropriate public protection procedures are in place to reduce the risks of physical harm to individuals during a terror attack. These procedures may include evacuating individuals from the premises or event, moving individuals to a safer location within the premises or event, restricting entry or exit during an incident and providing relevant safety information to those on site. 

For enhanced duty premises and qualifying events, there are further requirements. Responsible persons must regularly review their public protection measures, ensure that those measures are implemented and report them to the Security Industry Authority (SIA). They must prepare and keep up to date a document containing prescribed information, including a statement of the procedures in place, and an assessment of how those measured may be expected to reduce the risk. This document is to be shared with the SIA.

Shared responsibilities and lease implications

Where more than one person or organisation is responsible for a premises or event, each party is subject to duties under the Act. This could arise in lease arrangements where, for example, a tenant occupies part of a premises and may need the landlord’s permission to carry out certain public protection measures. Co-operation may be necessary to ensure legal compliance. 

Next steps

While there is no legal requirement to comply with the Act yet, it is important for premises owners, occupiers and event organisers to understand the obligations it will introduce. Failure to comply once the Act becomes effective may result in penalties and operational restrictions imposed by the SIA. 

The Home Office is expected to publish statutory guidance over the next 24 months, which should provide greater clarity on the responsibilities of those affected.