Policy paper

Terrorism (Protection of Premises) Act 2025: Overarching Factsheet

Published 3 April 2025

Why have we legislated?

Since March 2017, security services and law enforcement have together disrupted 43 late-stage plots and there have been 15 domestic terror attacks. These terrorist attacks have sadly demonstrated that the public may be targeted at a broad range of locations.

The Manchester Arena Inquiry and London Bridge Inquests called for the introduction of legislation and guidance to protect the public. The Terrorism (Protection of Premises) Act 2025 forms part of the Government鈥檚 wider counter-terrorism strategy, CONTEST.

The threat level from terrorism in the UK is currently SUBSTANTIAL, meaning an attack is likely. The 2023 strategy summarised the current threat facing the UK as 鈥榚nduring and evolving鈥�, with a domestic threat which 鈥榠s less predictable and harder to detect and investigate鈥�. Terrorists have targeted a wide range of people and places in recent years. It is not always possible to predict where in the UK an attack might happen, or the type of premises or events that could be impacted 鈥� either directly (as the target of an attack) or indirectly (by being located near to the target of an attack). To ensure better preparedness and raise the public safety bar, a broad range of premises and events need to be ready to act to reduce harm.

Our expert security partners assess that individuals are more likely to take action that can reduce harm and save lives, if they have considered what they would do, and how, prior to a terrorist attack occurring. Given the complexity and unpredictability, of an attack occurring, the Government has acted to bolster the UK鈥檚 preparedness for and protection from terrorist attacks.

What does the Act do?

The Terrorism (Protection of Premises) Act 2025 [footnote 1], commonly referred to as Martyn鈥檚 Law, is intended to improve protective security and organisational preparedness across the UK.

The new Act requires certain premises and events to ensure steps have been taken to prepare for potential terrorist attacks and get ready to help keep people safe in the event of an attack.聽In addition, certain larger premises and events will be required to consider and, where appropriate, take steps to reduce their vulnerability to acts of terrorism.聽

Ensure consistency of approach and clarity of responsibility

Whilst some premises and events proactively consider the risk posed by acts of terrorism, there is no consistency across the UK. Historically counter-terrorism protective security and preparedness have often fallen behind other legally required activities, such as Health and Safety.

The Act places public protection on a legal footing like other regimes, to address such inconsistency, whilst making it clear who is responsible at qualifying premises and events, and what they are required to do. 聽

Striking the right balance

Those responsible for certain premises and events must take appropriate action to reduce the risk of harm to their workers and the public. To ensure a proportionate approach, it is expected that procedures and measures that are reasonably practicable are put in place.

The legislation establishes a tiered approach linked to the different uses of premises and the number of individuals it is reasonable to expect may be present at the same time at the particular premises or events. The requirements vary accordingly, acknowledging that larger venues and events may be impacted to a greater extent by an attack and should be expected to do more.

Subject to other conditions, to be qualifying premises, 200 or more individuals (including staff) must, from time to time, be reasonably expected to be present at the same time in connection with one or more uses specified in the Act.

Where 800 or more individuals (including staff) may be reasonably expected at the premises from time to time, they will be enhanced duty premises unless the Act provides otherwise. Qualifying premises that do not meet this threshold will be standard duty premises.

One of the conditions to be a qualifying event is that 800 or more individuals (including staff) may reasonably be expected to present at the same time at some point during the event. Events beneath this threshold are not in scope.

Standard duty premises

Those responsible for standard duty premises are required to have in place, so far as is reasonably practicable, appropriate public protection procedures.

These are procedures that may be expected to reduce the risk of physical harm to individuals if an act of terrorism occurred at the premises or in the immediate vicinity. They are procedures to be followed by people working at the premises where they suspect an act of terrorism is occurring, or is about to occur, at the premises or in the immediate vicinity.

The types of procedure are listed in the Act. The requirements for these smaller premises are focused on activities to enact policies and procedures that are expected to be simple and low cost. The aim of these requirements is to improve staff preparedness and responses. The Act does not require physical alterations to premises or the purchase of equipment for the purpose of having these procedures in place.

Enhanced duty premises and qualifying events

Those responsible for enhanced duty premises and qualifying events are required to have in place public protections procedures, too, but they must also do more in recognition of the potentially more impactful consequence of a successful attack.

They are required to have in place, so far as is reasonably practicable, appropriate public protection measures. These are measures that further the objectives of reducing the vulnerability of the premises or event to acts of terrorism or reducing the risk of physical harm to individuals, thereby providing better protection from acts of terrorism.

The types of measures are listed in the Act.

Oversight, advice and inspection

The Security Industry Authority (SIA) will provide the regulatory functions set out in the Terrorism (Protection of Premises) Act. This includes investigating suspected non-compliance and, where appropriate, taking enforcement action.

These functions will be delivered through a new function of the SIA. The Government was clear during passage of the Act that a core principle of the SIA would be to support, advise and guide those responsible for premises and events to meet the requirements of the legislation.

Where required they will also investigate and enforce compliance with the requirements, using a toolkit of powers and sanctions to address serious or persistent cases of non-compliance. This includes the power to issue penalties to those who fail to fulfil the requirements and to place restrictions on enhanced duty premises and qualifying events in the most serious cases.

When will the legislation come into effect?

The Act received Royal Assent on 3 April 2025 and it is expected that the implementation period will be at least 24 months.

Whilst those that fall within scope of the Act may wish to begin considering the requirements, they should note that there will be no legal requirement to comply until the legislation comes into force. The Home Office will publish statutory guidance during the 24 month implementation period. This guidance will assist those responsible to understand the requirements set out in the legislation. It is being designed to be easy to follow, needing neither particular expertise nor the use of third-party products or services.聽

Footnotes

  1. The Act was granted Royal Assent on 3 April, but these requirements have not yet been commenced. This means that they are not yet in force and so do not need to be complied with until brought into force by regulations.聽鈫�