Martyn’s Law (Protect Duty): What Security Teams Must Do in 2026

April 22, 2026
Martyn’s Law (Protect Duty)

A crowded venue can feel safe until something goes wrong. When it does, the first few minutes decide the outcome. Many incidents are not caused by a lack of effort. They happen because teams are not prepared to respond under pressure.

The Manchester Arena bombing exposed this gap. The attack killed 22 people and injured hundreds. It showed what happens when security planning is not consistent or clearly defined.

Martyn’s Law is the response to that failure. It requires organizations to treat public venue security in the UK as a legal duty. You must assess risk, prepare your team, and act with clarity when it matters.

This change is critical as 2026 approaches. Security teams can no longer delay preparation or rely on informal processes. Security compliance 2026 UK depends on what you put in place now.

You need to ask direct questions:

  • Can your team recognise a threat early
  • Do they know how to respond in the first minute
  • Are your procedures clear and practiced

This guide explains what Martyn’s Law requires and how security teams should prepare in practical terms.

What is Martyn’s Law (Protect Duty)?

Martyn’s Law is a UK law that requires public venues and event organisers to prepare for terrorist threats and protect people on site. It is formally known as the Terrorism (Protection of Premises) Act 2025 and received Royal Assent in April 2025.

The legislation sets clear Martyn’s Law requirements for premises that are open to the public. If your venue can hold 200 or more people, you must plan how to respond to a terrorist incident and reduce risks where possible.

The focus is practical. You are expected to prepare your team and reduce exposure to threats before an incident occurs.

  • Preparedness: Define procedures for evacuation, lockdown, and communication
  • Protection: Assess vulnerabilities and take steps to reduce them, especially in larger venues

To make this scalable, the Act introduces a tiered system:

  • Standard tier (200–799 people): Focus on staff awareness and basic response planning
  • Enhanced tier (800+ people): Requires detailed risk assessment and stronger protective measures

This structure ensures that requirements match the size and risk level of each venue. The goal is to strengthen counter terrorism measures UK by making security a clear operational duty. You are not reacting after an incident. You are preparing for it in advance.

In practice, Martyn’s Law means this:  If you manage a public space, you must be ready to prevent, respond to, and recover from a terrorist threat.

Why is Martyn’s Law Being Introduced?

Security in public places across the UK has not followed one clear standard. Many venues made their own decisions about safety. This led to gaps in public venue security in the UK, especially in busy places where large crowds gather.

There was no clear legal rule that required teams to prepare for terrorist threats. Some venues are planned well. Some did not. This made safety depend on internal decisions instead of clear rules. Because of this, existing counter terrorism measures UK did not work the same way everywhere. Some places were prepared. Others were not ready to act during an emergency.

The risk is still present. Public venues stay open and crowded, which makes them harder to control during a threat. Martyn’s Law is introduced to fix this problem. It sets clear expectations. It makes organisations responsible for planning ahead, training their teams, and responding in a controlled way when an incident happens.

Who Must Comply with Martyn’s Law?

Martyn’s Law applies to places that are open to the public and can hold 200 or more people at the same time. If your space meets both conditions, it falls within the scope of the law.

This includes:

  • Stadiums and arenas
  • Shopping centres
  • Restaurants and bars
  • Hotels and event venues
  • Transport hubs
  • Offices open to visitors

It does not depend on the type of business. It depends on how the space is used and how many people may be present.

The Act defines two levels based on capacity:

Standard tier (200–799 people)

You must:

  • Train staff to recognise threats
  • Set clear response steps
  • Guide people during an incident

Enhanced tier (800+ people)

You must:

  • Carry out detailed risk checks
  • Identify weak points
  • Put stronger safety measures in place
  • Plan how teams will respond during an attack

This means security compliance 2026 UK applies to both small and large venues with different levels of responsibility.

In practical terms: If your space is open to the public and meets the capacity threshold, you are responsible for preparing your team and protecting people under Martyn’s Law.

Key Requirements for Security Teams Under Martyn’s Law

Security teams need to move beyond basic guarding. Under Martyn’s Law requirements, your role is to prepare for risk, guide people during an incident, and reduce harm as much as possible.

This is not theoretical. Since 2017, the UK has seen 15 terror attacks and 39 disrupted plots. That is why preparation matters in real settings, not just on paper. These actions should also align with wider UK security compliance, so your approach remains structured.

1. Risk Assessment

You start by looking at your own site with a critical eye. Where could someone enter unnoticed? Where would people gather during peak hours? What areas are hard to monitor?

  • Entry and exit points
  • Crowded zones
  • Areas with limited visibility

When you understand your space properly, your response becomes faster and more controlled.

2. Emergency Planning

A plan is only useful if people can follow it under pressure. In a real situation, there is no time to think through options.

You need clear actions for:

  • Getting people out quickly
  • Securing the site if exit is not possible
  • Passing clear instructions to everyone present

Teams that practice these steps do not freeze. They act with purpose.

3. Staff Training and Awareness

Training is what turns a plan into action. Without it, procedures stay on paper. Your team should be able to:

  • Notice behaviour that does not feel right
  • Follow set actions without hesitation
  • Support people who are confused or distressed

Confidence comes from repetition. When people know what to do, they respond better under pressure.

4. Physical and Technical Measures

For larger venues, basic planning is not enough. You need systems that support what your team is doing.

This can include:

  • CCTV surveillance systems to watch key areas
  • Controlled entry points with checks in place
  • Clear ways to send messages across the site

These measures do not replace people. They support faster decisions and better control.

5. Ongoing Review and Responsibility

Security is not something you set once and leave. Conditions change, and your plans need to keep up.

You should:

  • Review your setup at regular intervals
  • Update steps when something changes
  • Make sure one responsible person oversees the process

When responsibility is clear, decisions become faster and more reliable. You are expected to understand your risks, prepare your team, and guide people safely when something goes wrong.

Role of Security Teams in 2026 Compliance

Security teams are no longer limited to watching and reporting. Under security compliance 2026 UK, the role carries direct responsibility. Preparation now shapes how well a venue can respond when something goes wrong.

Much of the work sits in preparation. Teams review plans, check if they fit the space, and make sure staff understand their roles. Small gaps picked up early can prevent larger problems later. Strong public venue security UK depends on this groundwork. Awareness also becomes part of daily work. Not every risk is obvious. It may be unusual behaviour, unexpected movement, or something that feels out of place. Acting early can change the outcome.

When an incident starts, the pace changes. People look for direction, and the response from security teams sets the tone. This may involve guiding people out, managing crowd flow, or securing areas when movement needs to stop. Clear thinking matters in those moments. Training supports this in a quiet but important way. Teams that practise together respond with more confidence. Actions feel familiar, which helps reduce hesitation.

Technology supports decision-making. Tools like CCTV surveillance systems provide visibility across the site and help teams understand what is happening in real time. There is also responsibility beyond the visible work. Keeping records of training, incidents, and risk checks shows that the venue is prepared and taking its duty seriously.

Coordination with external authorities can also be part of the role. This may involve sharing information or supporting a wider response when required. At its core, the role is simple. Security teams make sure that preparation turns into action when it matters.

Challenges in Implementing Martyn’s Law

Understanding the law is one part. Applying it in real situations is where teams start to struggle.

1. Turning plans into real action

Most venues can create a plan. The difficulty starts when teams try to follow it under pressure. A written plan may look clear, but real situations move fast. People hesitate, communication breaks down, and decisions need to be made quickly.

2. Knowing what is “enough”

The UK Protect Duty legislation allows flexibility. Security measures should match the size and risk of the venue. This creates uncertainty, and teams are not always sure if their setup is enough or if they need to go further. Without a clear benchmark, decision-making becomes harder.

3. Limited time and resources

Not every venue has a dedicated security team or extra budget for new measures. Daily operations still need attention. Staff handles multiple roles, and security becomes one part of a larger workload. This makes it difficult to give proper time to planning and preparation.

4. Keeping staff ready

Training cannot be done once and left. Staff change, new people join, and roles shift over time. What was clear earlier may not stay clear later. Without regular practice, even simple procedures can fail when pressure builds.

5. Technology gaps

Some venues already have systems in place. Others are still building their setup. Introducing tools like AI-based security in UK environments can improve awareness, but teams also need to understand how to use them. Without proper use, systems add complexity instead of support.

6. Communication under pressure

Clear communication is difficult during an incident. Information may be incomplete, and instructions may not reach everyone. Confusion can spread quickly if messages are not simple and direct. Teams need practical ways to guide people without delay.

7. Starting early vs waiting

There is still a gap between awareness and action. Some organisations start preparing early. Others wait until enforcement gets closer. This leads to uneven readiness, where some venues are prepared, and others are still catching up.

Impact of Martyn’s Law on the UK Security Industry

Martyn’s Law is changing how security is approached across the UK. It moves security from something optional to something that must be planned, managed, and taken seriously at every level.

One of the biggest changes is responsibility. Security is no longer seen as a support role. Organisations now need to show how they prepare for risks and how they would respond if something happens. This brings more structure and places security closer to daily decision-making.

There is also a clear rise in demand for security services. More venues now fall under the law, which means more need for risk assessments, planning, and trained staff. Many organisations are building these processes for the first time, so they rely on external support.

Standards across the industry are starting to align. Instead of uneven levels of preparedness, there is now a shared expectation. This leads to better training, clearer procedures, and more defined roles.

Training and compliance have also become central. Security is no longer just about being present on site. It involves preparing teams, running drills, and keeping records that show readiness.

Technology is playing a stronger role as well. Tools that help monitor activity and detect unusual behaviour are becoming part of everyday operations. In some cases, this includes systems like AI-based security in UK environments, which support faster and more informed decisions.

Cost is another factor. Meeting these requirements requires investment in people, planning, and systems. For smaller venues, this can be challenging. There is also a financial risk, as non-compliance can lead to fines of up to £18 million or 5% of global revenue.

At the same time, coordination is improving. Security teams are working more closely with management, local authorities, and emergency services.

Future of Protect Duty Beyond 2026

The introduction of Protect Duty is only the starting point. The real change will become visible as enforcement strengthens after 2026.

Many organisations are still in the early stages of preparation. As expectations become clearer, security practices will start to align across different venues. This will reduce the gaps that currently exist in how security is managed.

The UK Protect Duty legislation is also expected to evolve with time. Guidance will become more practical and tailored to different sectors, helping teams apply requirements in real situations instead of relying on general advice.

Regulation will play a stronger role as well. With oversight from the Security Industry Authority, organisations will face clearer checks and defined accountability. This means preparation will need to move beyond basic planning and into daily operations.

Another key change is adaptability. Security requirements will not remain fixed. As threats change, organisations will need to update their approach. This makes continuous review and awareness part of the role.

Technology will also shape the future. Many venues will rely on tools that improve visibility and decision-making. Keeping up with the latest security technologies will become part of long-term planning, not just an upgrade decision.

Over time, the biggest shift will be cultural. Security will become part of routine work rather than something reviewed occasionally. Teams will need to stay ready, informed, and consistent in how they operate.

Conclusion

Martyn’s Law is changing how organisations think about security. It is no longer something handled only when needed. It becomes part of everyday work. For many venues, the challenge is not understanding the law. It is putting it into practice. Plans need to be clear, teams need to be ready, and actions need to make sense in real situations. This also changes the role of security teams. The focus is not just on watching but on preparing, guiding, and responding when it matters. Over time, this shift will lead to a more consistent approach across the UK.

FAQ

What is Martyn’s Law (Protect Duty)?

Martyn’s Law, also known as the Terrorism (Protection of Premises) Act 2025, is about being prepared. It asks venues to think ahead, spot risks, and have clear steps ready so people can be kept safe.

Who needs to comply with Martyn’s Law in 2026?

If a place is open to the public and can hold around 200 people or more, it falls under this law. That covers everyday spaces like shops, offices, hotels, and event venues.

What are the key requirements under Martyn’s Law?

At its core, it’s about knowing your risks and being ready. Staff need to understand what to do, and there should be simple actions in place, like how to respond or guide people.

How will Martyn’s Law impact security teams and venues?

It changes the role quite a bit. Security teams are no longer just watching; they are part of planning and response. Venues also need to be more organised, so things don’t fall apart under pressure.

Why is Martyn’s Law important for public safety in the UK?

It helps avoid panic and confusion when something serious happens. When people know their role and the plan is clear, the response is quicker, and that can make a real difference.

Read Next

Security Journal UK

Subscribe Now

Subscribe
Apply
£99.99 for each year
No payment items has been selected yet