Martyn's Law is no longer a future item for UK operators — the framework is being built now.
Under the Terrorism (Protection of Premises) Act 2025, the Security Industry Authority becomes the regulator. It has been standing up the systems, teams and guidance since April 2025 and expects that work to complete in early spring 2027, with the law's duties coming into force in spring 2027. A notification portal for responsible persons will open from early 2027 after volunteer testing.
The scope is set by headcount. Premises where 200 to 799 people may be present fall in the standard tier: notify the SIA and put in place appropriate public-protection procedures. Premises and qualifying events at 800 or more sit in the enhanced tier, with heavier duties — documented measures and compliance submissions to the regulator.
The detail that will govern day-to-day compliance is the SIA's section 12 guidance, which sets out how it will advise, inspect and enforce. That draft has been through public consultation — now closed — and is being finalised.
For close-protection and security managers, the practical move is to get ahead of the standard now: know which tier a client's premises or event falls into, map the reasonably practicable measures, and be ready to evidence them. The Level 3 counter-terrorism award is worth having, though note it is not mandated by the Act itself. Enforcement is 2027 — but the venues and events you cover will expect their security partners to already have the answers.
