A new law has been passed which places enhanced security requirements on premises that hold 200 or more people, including nightclubs, restaurants, theatres, concert halls, museums, and certain sports grounds.

Known as ‘Martyn’s Law’, after one of the victims of the Manchester Arena Attack, the Terrorism (Protection of Premises) Act 2025 requires premises and venues of a certain size to take additional steps to ensure that procedures are in place to consider how they would respond to terrorist attacks.

The legislation distinguishes between two types of premises, depending on their size. Those which at least occasionally hold 200-799 people are known as ‘standard duty premises’ and must ensure that “appropriate protection procedures” are in place to reduce the risk of physical harm being caused to individuals if an act of terrorism were to occur on the premises or in its immediate vicinity. What constitutes appropriate protection procedures is likely to be fleshed out in upcoming guidance, but the legislation refers to, for example, having measures for evacuating individuals, for preventing people entering or leaving the premises, and for providing necessary information to people.

Premises that meet the criteria for standard duty premises but are expected to hold 800 or more people from time to time are designated ‘enhanced duty premises’. As the name would suggest, enhanced duty premises are subject to greater obligations, including to have “public protection measures” in place relating to (a) the monitoring of the premises and its immediate vicinity, (b) the movement of individuals in and out of the premises, (c) the physical safety of the premises, and (d) the security of information in relation to the premises. Those responsible for enhanced duty premises must also keep updated records of the procedures that it has in place and provide it to the Security Industry Authority (SIA), which will be responsible for enforcing the new regime.

The Act also sets out requirements for so-called ‘qualifying events’, which are those that are not held at enhanced duty premises, but at which it is reasonable to expect 800 or more people may be present at any one time, and which have measures in place to check entry conditions. Those who are in control of the premises for the purpose of the event will be responsible for ensuring that the event has the same measures in place as those required for enhanced duty premises.

The Home Office has confirmed that guidance will be published in due course, setting out what will be expected of businesses and organisations that fall within the scope of the Act. There will also be a period of at least two years before the legislation is implemented to allow those premises and events that are in scope to understand their new obligations and prepare accordingly.

To read more, click here.