The Terrorism (Protection of Premises) Act 2025, better known as Martyn's Law, received Royal Assent on Thursday 3 April 2025. The implementation period is expected to run for at least 24 months from that date, with the duties due to commence in spring 2027. That timetable is deliberate: it gives the Security Industry Authority time to build out its new role as regulator, and gives premises time to get ready.
The framework splits sites into two tiers by how many people may be present at the same time. The standard tier covers premises where 200 to 799 individuals may be present. The enhanced tier covers larger premises and qualifying events where 800 or more may be present. Standard-tier sites must put in place appropriate public protection procedures, covering evacuation, moving people to safety inside a building, locking down, and communicating with staff and the public. There is no requirement for physical security equipment at this tier. Enhanced-tier sites carry the procedures plus appropriate public protection measures around monitoring, controlling movement, physical security and information security, and they must document what they have in place and provide it to the regulator.
The regulatory detail is now firming up. The SIA consulted on draft section 12 guidance between 15 April and 12 June 2026, and the final version is expected in autumn 2026. As regulator the SIA will assess compliance through desk-based assessments and on-site inspections, typically giving at least 72 hours' notice, though it can seek a court warrant to enter unannounced where needed. Volunteer testing of the compliance portal is expected to begin in early 2027.
For anyone in protective security the practical read is simple. The obligations are not live yet, but the shape is now clear enough to act on. Working out which tier a venue or event falls into, and drafting the procedures the standard tier will require, is preparation that can start now rather than in 2027.
