Overview

The Terrorism (Protection of Premises) Act 2025, also commonly referred to as Martyn’s Law, finally received Royal Assent on Thursday 3 April 2025.

Martyn’s Law is planned to improve protective security and organisational preparedness across the UK by requiring that those responsible for certain premises and events consider how they would respond to a terrorist attack.

What has changed? 

Universities and colleges will be required to carry out and keep up-to-date risk assessments for their premises, addressing both the likelihood and potential impact of a terrorist attack and taking into account, amongst other things, any specific vulnerabilities of the premises.

The Act establishes a tiered approach, linked to the number of individuals it is reasonable to expect to be present at the same time at premises and events.

For smaller premises (numbering 200-799 individuals), these will fall within the ‘standard tier.’ Requirements here can be more straightforward and low-cost, designed to ensure those working at premises or events are better able to reduce harm, and protect lives if an attack were to occur. Controls could be as simple measures around access controls and identifying safe routes. For larger premises or event (like graduations), where 800 or more individuals may be present these are considered to be ‘enhanced tier.’ Appropriate measures for enhanced duty premises and events will be more involved and could include bag search policies, CCTV or other monitoring and vehicle checks.

How is it monitored?

The Security Industry Authority (SIA) has been appointed to act as the regulator, they will support and guide, in addition to enforcing the act.

Where qualifying, the person responsible (those who have control of the premises or event) have a duty to notify the regulator for both standard and enhanced premises / events. Then so far as reasonably practicable ensure appropriate procedures to reduce risk of harm if an attack was to occur. For enhanced duties this will also extend to a formal assessment and documentation of protection procedures to be shared with the regulator.

UMAL will monitor closely the development and interpretation of the methods used and how reasonably practicable will be benchmarked over the implementation period.

What do I need to do?

While it may sound onerous, many of our Members already do excellent work to improve their security and preparedness around both premises and events, also remember the implementation period (the time given before into force) will be 24 months.

The Home Office is developing further guidance, factsheets, assessment templates and training that are intended to be easy to follow and will not require elevated expertise. It is hoped these guides will encourage more consistent controls and outcomes.

It is UMAL’s intention to augment and further strengthen our communications during the implementation period, to support our Members and raise awareness. For further support or for useful links on Martyn’s Law, please contact the UMAL Risk Control team.