Martyn’s Law is moving closer to implementation, and organisations in scope should now be considering what they need to do to prepare for commencement. This means understanding which tier applies, identifying responsibilities, reviewing protective security procedures and ensuring that staff have the knowledge and confidence to respond effectively.
We’re quickly approaching the final stages of the minimum 24-month implementation period set out by the Government when the Terrorism (Protection of Premises) Act 2025 received Royal Assent in April last year. This means organisations across security, events, retail, hospitality, education and wider sectors should shift their attention from what the law is to what is needed to be prepared for enforcement.
The Home Office published section 27 statutory guidance earlier this year which sets out the scope of the legislation, the requirements for qualifying premises and events, and the responsibilities of those with duties under the Act. The regulator responsible for enforcing the legislation – the Security Industry Authority (SIA) – also consulted on section 12 statutory guidance over the summer months and is due to publish the final guidance in due course.
The legislation, commonly referred to as Martyn’s Law, provides a key moment for national and protective security, with many businesses and consultants proactively developing products and services to strengthen preparedness and capabilities under the requirements set out in the legislation.
While this approach is welcome and necessary, it is important to note that only the SIA can determine compliance and non-compliance with the legislation.
As a reminder, Martyn’s law takes a proportionate, two-tiered approach. The standard duty applies to those where it is reasonable to expect between 200 and 799 people to be present at the same time. The responsible person will need to notify the SIA and have appropriate public protection procedures in place, so far as reasonably practicable. These cover evacuation, invacuation, lockdown, and communication.
The enhanced duty applies to premises where 800 or more may reasonably be expected to be present, while qualifying events have the same enhanced requirements. In addition to protection procedures, enhanced duty requires measures to reduce vulnerability of their premises or events to terrorism. They will have to document their procedures and measures, assess how they reduce risk, and submit documentation to the SIA.
One of the most important developments is the growing availability of training and qualifications, but there is no statutory requirement for a particular Martyn’s Law training course or qualification. The guidance makes clear that people responsible for implementing protective security procedures must understand those procedures, their individual roles, and have the knowledge, experience and tools needed to carry them out effectively.
For those looking to build that capability, the free ACT e-learning is an excellent starting point. Counter Terrorism Policing and NaCTSO launched a refreshed version in June 2026, with improved accessibility, new filmed exercises and optional modules. ACT e-learning takes around 45 minutes and covers subjects including suspicious activity, security vulnerabilities and marauding terrorist attacks.
For frontline security professionals, ACT Security e-learning provides a more specific focus on the role of security personnel and can sit alongside existing SIA-mandated training and other professional development.
NaCTSO also launched the SFJ Level 3 Award in Counter Terrorism Protective Security and Preparedness. The course covers terrorism, security culture, protective security, preparedness, and counter terrorism risk assessment.
For employers, the priority should be to consider training as part of a wider programme of preparedness rather than as a standalone requirement. This means identifying who needs to understand the procedures, what responsibilities different individuals will have during an incident, and whether staff have the practical skills and confidence to act effectively. Importantly, this training should be tested to strengthen preparedness and resilience.
Martyn’s Law should not be treated as a training compliance exercise. No qualification makes an organisation compliant by itself but the real objective is to develop the people, procedures, risk assessments, security culture and organisational resilience needed to protect the public effectively.
With commencement of the legislation approaching, the organisations that invest in those capabilities now will be better placed when the requirements come into force, expected in Spring 2027.
Nathan Emmerich
Founder SW-One
