What does Martyn's law require me to do?
All premises that fall under the Terrorism (Protection of Premises) Act 2025 must notify the Security Industry Authority, and must also have appropriate "reasonably practicable"* public protection procedures in place which should reduce the risk of physical harm being caused in the event of a terrorist attack on the premises, at the event, or nearby.
Public protection procedures should be a plan that staff can follow to reduce the risk of injury in the event of an act of terrorism. If no staff are on site, it must be considered how people on the premises could follow the procedures (for example, posters). Considerations and procedures must also take into account the immediate vicinity of the premises.
There are four types of public protection procedures:
Evacuation — move people away from danger by leaving the premises or event
Invacuation — move people away from danger by moving to a safer part of the premises or event
Lockdown — secure the premises or event to prevent people from entering or leaving
Communication — provide information to people at the premises or event
'Appropriate measures' means taking account of the size and type of premises and what actions and resources are available; there is no requirement to make any physical changes to the premises or buy new equipment, unless it is reasonably practicable to do so.
It is considered good practice (but not a requirement) that staff are aware of different types of terrorist attack, however it is more important to identify the immediate threat and the related necessary actions.
Enhanced Tier requirements
Premises that fall within the advanced tier of Martyn's Law (ie. those that will have 800 or more people in attendance at the same time) must also implement extra procedures in addition to those mentioned above:
- Document the procedures and measures that are in place
- Designate a senior responsible person (rather than a group or company) who is responsible for ensuring compliance
- Implement public protection measures relating to:
- Monitoring the premises or event to identify potential suspicious activity
- Restrict movement into, out of and within the premises
- Strengthen the physical safety and security of the premises or event to deter and reduce the impact of terror attacks
- Keep information about the premises or event secure and ensure it is not widely available