A crowded room or venue can feel safe and secure until something goes wrong and panic sets in. The Manchester Arena bombing, which led to 22 deaths and hundreds of injuries, is a stark example. It illustrated what can happen when safety and security planning is inadequate, inconsistent, or not clearly defined. The Act came into existence as a result of the concerted efforts of a mother (Mrs Martyn), who lost her son in the bombing. Martyn's Law is the response to these failures. Although organisers are already under an implied duty of care towards attendees, this legislation requires organisations to treat public security as a mandatory duty. It comes into force in Spring 2027.
Organisers are required to assess the risks, prepare emergency plans, train their teams, and act with clarity and certainty when emergencies arise. Ask yourself:
Can we recognise a threat early?
Do we clearly know how to respond in the early stages of a threat?
Do we have clear plans and procedures?
Are our teams aware of these plans and trained to act early?
What is Martyn's Law?
The law requires public venues and event organisers to prepare for terrorist threats and protect people on their premises. The Act makes a clear statement:
"...to require persons with control of certain premises or events to take steps to reduce the vulnerability of the premises or events to, and the risk of physical harm to individuals arising from, terrorism."
The basic duty applies to premises with a capacity of 200 to 799 people, while the Enhanced Duty applies where the premises have a capacity of 800 or more people. Organisers are now required to draw up plans explaining how they will respond to terrorist incidents and reduce risk. They are expected to prepare plans, train their teams, and take steps to reduce the impact of threats before an incident occurs.
What does this mean for me?
Be ready and prepared with clearly documented plans and procedures for evacuations (getting people out quickly and safely), securing the site where possible, communications, and lockdown procedures.
Train staff so they can recognise unusual or suspicious behaviour, follow established plans, and support those affected by an incident.
Assess risk factors and take practical steps to reduce them. This may include CCTV surveillance, controlled entry points, and effective lines of communication.
Keep policies and procedures under regular review.
Introduce a tiered system of response measures:
Standard Tier – ensuring staff awareness and basic response planning, including recognising threats, following clear response procedures, and providing guidance during an emergency.
Enhanced Tier – requiring detailed risk assessments and more robust control measures, identifying vulnerabilities, implementing stronger security arrangements, and planning how teams will respond during an incident.
Who does the Act apply to?
It applies to all public and private premises capable of accommodating 200 or more people. Common examples include:
Stadiums
Concert and exhibition venues
Shopping centres
Hotels and event venues
Transport hubs
Remember the key factors
Early detection
Evacuation
Communication
Support for affected persons
This is a brief guide for illustrative purposes only. Businesses are advised to seek more detailed advice and assistance to ensure compliance with the new statutory requirements.
