The framework under the Terrorism (Protection of Premises) Act 2025 — Martyn's Law — is now taking concrete shape. Open-source reporting indicates the Home Office published its statutory guidance on 15 April 2026, clarifying which premises fall in scope through decision trees and worked examples. The same day, the Security Industry Authority launched its consultation on the draft section 12 guidance setting out how it will act as regulator.
That consultation closed at 11:59pm on 12 June, with final guidance expected in the autumn. The tiering is unchanged: standard duty premises are those where 200 to 799 individuals may be present, enhanced duty premises 800 or more. Standard-tier duty holders must put in place public protection procedures — evacuation, invacuation, lockdown and communication; enhanced-tier sites carry additional documentation and assessment requirements.
The SIA's role is regulator, not box-ticker. Its powers run to entering and inspecting premises, gathering information, issuing compliance and restriction notices and monetary penalties, and referring the most serious cases for prosecution. The regime is not expected in force before spring 2027, following an implementation period of at least 24 months.
Operator implication: the long runway is the point. The direction is competency-led, so the deliverable is evidence — documented procedures, named responsibilities, and staff training that would stand up to inspection — not a certificate bought late. For security providers, this is a live advisory and delivery opportunity across the venue and events estate: help duty holders map scope, write procedures and rehearse them well before the clock runs out.
