Martyn’s Law: What the Legislation Means for UK Venues

In May 2017, 22 people tragically lost their lives in the Manchester Arena bombing. Among them was Martyn Hett. In the years that followed, Martyn’s mother campaigned tirelessly for legislative change that would ensure public venues with a capacity of 200 or more are better prepared for terrorist attacks.

Martyn’s Law, officially the Terrorism (Protection of Premises) Act 2025, is UK legislation aimed at improving preparedness and protective security for certain publicly accessible venues and events, ensuring responsible persons take practical steps to reduce the risk of terrorism and protect the public.

On 3 April 2025, the Terrorism (Protection of Premises) Act 2025 received Royal Assent. It is expected to come into force in Spring 2027. To best accord with Martyn’s Law requirements, organisations should understand who it affects and ensure they’re working with compliant, resilient security solutions.

What Is Martyn’s Law?

Martyn’s Law is the common name for the Terrorism (Protection of Premises) Act 2025. Prior to the Manchester Arena bombing in May of 2017, there had been no specific legal requirement for venues to adopt counterterrorism measures. The newly instituted Act mandates that those responsible for qualifying premises and events plan for and actively reduce vulnerability to terrorist threats. 

Key Fact: The Security Industry Authority (SIA) is the regulator responsible for overseeing compliance. There is no legal duty to comply until the Act formally commences, but the implementation period is designed to give venues time to prepare. Spring 2027 is the target date.

Why Martyn’s Law Was Introduced in the UK

The Manchester Arena Inquiry, led by Sir John Saunders, identified systemic failures in how the venue and its partners prepared for and responded to the attack. The Arena’s operators had not adequately assessed the risk of terrorism. Key vulnerabilities, including the foyer area where the bomb was detonated, had not been identified or addressed. 

The inquiry found that better procedures, clearer accountability, and more effective use of available technology could have made a difference, leading to the creation of Martyn’s Law. 

Martyn’s Law Requirements: Standard and Enhanced Tiers

The Act sorts qualifying premises and events into two tiers based on a single test: how many individuals, including staff, may reasonably be expected to be present at the same time. 

The Enhanced Tier adds further requirements to the Standard Tier, including public protection measures, a designated senior individual accountable for security, and a written compliance document submitted to the SIA.

Who Does Martyn’s Law Affect?

The Act applies to a wide range of premises and events. If a venue or space is wholly or mainly used for one or more of the following, it is likely in scope: 

• Retail: Shops, shopping centres, and markets 
• Hospitality: Bars, pubs, restaurants, and hotels 
• Entertainment: Nightclubs, theatres, cinemas, and concert venues 
• Sports and Leisure: Stadiums, arenas, and leisure centres 
• Transport Hubs: Stations, airports, and terminals 
• Education: Schools, universities, and childcare facilities 
• Healthcare: Hospitals, clinics, and outpatient care centers
• Meeting Facilities: Community halls, conference centres, and exhibition spaces

For organisations managing a multi-site estate, each location is assessed individually. A retail chain with stores of varying sizes may find some sites fall under Standard Tier and others under Enhanced Tier. 

What Does Compliance Look Like?

Martyn’s Law requires that venues implement measures that are ‘reasonably practicable’ to reduce vulnerability to a terrorist attack. The SIA will assess whether the measures in place are proportionate to the risk and the size of the venue. 

Standard Tier Requirements

For venues with a capacity of 200 to 799, businesses will need to have plans in place for: 

• Evacuation: Safely moving people out of the premises 
• Invacuation: Moving people to a place of safety within the premises 
• Lockdown: Securing the premises to prevent entry or exit 
• Communication: Alerting staff and the public during an incident 

Staff must be trained to understand and execute these procedures. 

Enhanced Tier Requirements

Venues with a capacity of 800 or more must meet all Standard Tier and Enhanced Tier obligations, including: 

• Implementation of public protection measures that are reasonably practicable to reduce vulnerability 
• Appointing a designated senior individual who is accountable for security 
• Producing and submitting a written compliance document to the SIA 
• Maintaining documented and operational CCTV coverage 
• Deploying access control, intrusion detection, and mass notification systems 
• Conducting regular security reviews and record keeping

Why Technology Matters: A unified security platform that consolidates video, access control, alarms, and analytics into a single, auditable record makes it straightforward to produce evidence of compliance for the SIA. It also enables faster decision-making during an incident.

How OpenEye Supports Martyn’s Law Security Preparedness

OpenEye’s open, intelligent, and trusted cloud video platform, OpenEye Web Services (OWS), is built to give venue operators the visibility, control, and evidence they need to operate safely and demonstrate compliance. 

Cloud-Managed Video Surveillance for Multi-Site Venue Security

OWS delivers centralised management with remote access from numerous client applications, including mobile and browser-based options. Health monitoring proactively flags issues such as hard drive failures or cameras going offline, so businesses aren’t left with gaps in coverage. Automatic software updates keep the system current without manual intervention. For Martyn’s Law, this helps demonstrate documented surveillance coverage to the SIA, with a clear audit trail of system health and operator actions. 

For organisations with multiple locations, OWS provides a single dashboard to manage permissions, review footage, and run compliance reports across the entire estate. This is particularly valuable for the written compliance document required under Enhanced Tier. 

AI Video Analytics: From Reactive to Proactive

Advanced CCTV is at the core of Martyn’s Law compliance. OWS goes beyond standard recording with AI video analytics that can detect unique events, alert on objects in designated areas, and count the number of people entering and exiting a location over time. These capabilities support security teams to proactively intervene before an incident escalates. 

Scalable Video Surveillance for Any Estate

Whether operating a single venue or a portfolio of hundreds of sites, OWS scales to meet organisational needs. OpenEye’s cloud cameras include a dedicated analytics processor and bring their own storage and processing power, with no limitations on channel count or system resources for a flexible, serverless architecture. Recorder-based deployments can use analytics capabilities without replacing infrastructure to help organizations get more from their existing investment. 

Preparing Your Venue for Martyn’s Law Requirements 

The implementation period for Martyn’s Law is designed to give venues the time they need to prepare. However, as spring of 2027 will arrive quickly, here are several practical starting points for venue operators: 

1. Assess Capacity: Determine how many people, including staff, may reasonably be present at the same time to determine the level of tier and consequent regulations that apply to your organization. 
2. Audit Current Security Posture: Review existing CCTV, access control, and emergency procedures against the requirements for the corresponding tier. 
3. Identify Gaps: Assess vulnerabilities, procedure documentation, and whether current technology is fit for purpose. 
4. Coordinate With the Security Technology Partner: Work with a trusted provider to assess what you have, look at retrofit and upgrade options, and identify what you need to close gaps. 
5. Adequately Train Staff: Ensure staff feel confident effectively executing procedures. 
6. Document Each Step: Start building the evidence trail now. The SIA will want to see the approach is systematic and ongoing. 

Find out how organisations can strengthen venues with OpenEye today. 

About the Author

Simon Chrabkowski is the Enterprise Sales Manager for EMEA at OpenEye. With 23 years of experience across security integrators and global manufacturers, Simon has seen first-hand the major technology shifts shaping the industry, from analogue to IP and now towards cloud-managed and AI-powered platforms.

FAQs: Martyn’s Law

What is Martyn’s Law in the UK?

Martyn’s Law, known also as the Terrorism (Protection of Premises) Act 2025, is a legal requirement for venues to adopt counterterrorism measures. The mandate requires qualifying venues and organizations to plan for and actively reduce vulnerability to terrorist threats.   

When will Martyn’s Law come into effect?

Martyn’s Law is projected to come into effect by spring 2027. 

What is the purpose of the Terrorism (Protection of Premises) Act 2025?

The purpose of the Terrorism (Protection of Premises) Act 2025 is to increase security measures around venues to prevent terrorist attacks. 

Which venues and businesses are affected by Martyn’s Law?

Venues and businesses that host events with 200 or more attendees are required to comply to the regulations imposed by Martyn’s Law. The requirements for organizations are assessed based on the individual size of each location. 

What is the difference between the Standard and Enhanced Tiers of Martyn’s Law?

The Standard Tier of Martyn’s Law applies to venues and events where 200 to 799 people can attend. Evacuation, Invacuation, Lockdown, and Communication protocols must be in place for these venues. Enhanced Tier regulations apply to venues with a capacity of 800 or more. The Enhanced Tier requires additional regulations including public protection measures, a designated senior individual accountable for security, and a written compliance document.