The Security Industry Authority (SIA) has published new guidance explaining both the requirements of Martyn’s Law and how it intends to regulate compliance when the legislation comes into force, currently expected in Spring 2027.

The guidance provides organisations with greater clarity on whether their premises or events fall within scope, what duties they will be expected to fulfil, and how the SIA will assess compliance through a combination of desk-based reviews and on-site inspections.

What is Martyn’s Law?

The Terrorism (Protection of Premises) Act 2025, commonly known as Martyn’s Law, was introduced to strengthen public safety by ensuring certain publicly accessible premises and events are better prepared to respond to a terrorist attack. The legislation is named in memory of Martyn Hett, one of the 22 victims of the Manchester Arena attack.

The SIA has been appointed as the regulator and has confirmed that its focus will be on helping organisations understand and meet their responsibilities, while taking a proportionate and risk-based approach to enforcement.

Which Premises and Events Are in Scope?

According to the SIA’s guidance:

  • Standard Tier Premises generally include qualifying premises where 200 to 799 people may be present at the busiest times.
  • Enhanced Tier Premises include qualifying premises where 800 or more people may be present.
  • Qualifying Events may also fall within scope where attendance is expected to exceed 800 people and entry controls are in place.

The legislation affects a wide range of sectors including healthcare, education, retail, hospitality, leisure, cultural venues, places of worship, visitor attractions and large public events.

Key Requirements

Organisations within scope will need to implement and maintain appropriate public protection procedures. These include:

  • Evacuation
  • Invacuation
  • Lockdown
  • Communication during an incident

Enhanced Tier premises and qualifying events will face additional requirements, including:

  • Assessing vulnerabilities to terrorism
  • Implementing proportionate security measures
  • Documenting procedures and protective measures
  • Submitting compliance information to the SIA

The SIA has also confirmed that compliance assessments will be intelligence-led and risk-based, with inspections typically carried out following at least 72 hours’ notice.

Why Organisations Should Act Now

Although the legislation is not expected to come into force until Spring 2027, the latest guidance makes it clear that organisations should begin preparing now. Responsibility for compliance cannot be delegated away, meaning those with control of premises or events must be able to demonstrate they have considered the terrorism risks relevant to their environment and implemented proportionate measures.

For many organisations, understanding current levels of preparedness is the first challenge. This includes reviewing emergency plans, staff awareness, governance arrangements, security procedures, communication processes and wider organisational resilience.

How TIAA Can Help

TIAA’s Terrorism Preparedness Review has been specifically designed to help organisations understand and improve their readiness for the requirements introduced under Martyn’s Law. The assessment evaluates preparedness across seven critical areas, including compliance, lockdown procedures, evacuation planning, emergency services communication and wider organisational engagement.

The framework enables organisations to:

  • Assess their current counter-terrorism maturity.
  • Identify compliance and preparedness gaps.
  • Develop prioritised improvement plans.
  • Support board-level assurance and governance.
  • Strengthen readiness for future regulatory scrutiny under Martyn’s Law.

As the SIA continues to develop its regulatory framework and publishes further guidance later this year, organisations should use this period to assess their preparedness and ensure they are well-positioned for compliance ahead of implementation.

Find out more about TIAA’s Terrorism Preparedness Review: Terrorism Preparedness Review – TIAA

Source: Security Industry Authority, “Understanding Martyn’s Law and the SIA’s role as regulator”, published 17 July 2026.