Martyn's Law planning tool and template published for venues and events
The Security Industry Authority has released its first practical tools for premises and events that will fall under the Terrorism (Protection of Premises) Act 2025, and is taking feedback on them until 23 December.
Venues, shops, councils and event organisers getting ready for Martyn's Law have two documents from the regulator to plan with. On Monday 9 November the Security Industry Authority (SIA) published a planning tool for standard tier premises and a compliance template for enhanced tier premises and events, and wants people to try them out.
Martyn's Law is the common name for the Terrorism (Protection of Premises) Act 2025. The SIA says it will not take effect before spring 2027 and the exact date will be confirmed in advance.
Which tool applies
The split depends on how many people, staff included, can reasonably be expected on site at the busiest times.
Standard tier. Premises where 200 to 799 people may be present at once. Childcare settings, schools, further education premises and places of worship stay in this tier even if numbers reach 800 or more. The planning tool takes the responsible person through four procedures the Act asks them to consider: evacuation, invacuation (moving people to a safer place inside the building), lockdown, and communicating with staff and the public. Completed planning documents do not have to be sent to the SIA.
Enhanced tier and qualifying events. Premises where 800 or more people may be present, and events that meet all of the following: 800 or more people expected, entry checks such as tickets, passes or wristbands, public access, and a venue that is not already enhanced tier premises. The template covers the same procedures plus how vulnerabilities will be assessed and how monitoring, movement of people, physical security and information security will be used to reduce them. It is meant to be submitted to the SIA once the law is in force, and the regulator has asked people not to send anything before then.
The SIA describes the documents as a way to work through decisions and record them, not a definitive checklist of what to do.
What the law will require
When the Act comes in, every premises and event in scope must tell the SIA who the responsible person is. That is whoever controls the premises for the use that brings it into scope, usually an organisation rather than an individual. Standard tier premises will not have to submit compliance documents at that point unless the SIA asks for them.
There is no legal duty to complete specific training, although the regulator says anyone carrying out the procedures must understand them and their own role. Free training modules are available on ProtectUK and from the National Protective Security Authority.
The SIA also says the Act does not require organisers to hire security staff, buy technology or pay consultants, and that the test is what is reasonably practicable. It notes that many traditional Christmas markets may fall outside the definition of a qualifying event because entry to them is not controlled.
Testing and feedback
Feedback on the tool and template can be sent through the SIA's online form until 23 December. Flowcharts on ProtectUK help organisations check whether they are in scope, and general questions go to MLR@sia.gov.uk.
Pilot inspections have so far included a nightclub, a university and a heritage site, with more than 30 further premises and events lined up for the next round. The regulator is about to test its new digital service with users and wants volunteers from one-off events of any size, hospitals and sites with several uses.
