Martyn's Law applies by what a building is used for, not by what it is called

Find out in a minute whether the Terrorism (Protection of Premises) Act 2025 covers your premises. If it does, answer fifteen questions and get a set of public protection procedures your staff can actually follow.

Where the law has actually got to

The Act received Royal Assent on 3 April 2025. Since then one section has been brought into force: section 27, which made the Home Office publish guidance, on 10 April 2026. The duties themselves — sections 2, 3, 5, 6, 9 and 10 — are not in force, and the Security Industry Authority, which will regulate this, says it expects the Act to come into force in spring 2027.

So nothing here is late, and nothing here is yet required of you. That is the good news and it is the reason to do it now rather than in the spring.

What the two tiers mean

• Fewer than 200 people expected at the same time, including staff: outside the Act.
• 200 to 799: standard duty premises. You need appropriate public protection procedures in place, so far as is reasonably practicable — evacuation, invacuation, lockdown and communication.
• 800 or more: enhanced duty premises. Procedures, plus public protection measures and a document that goes to the regulator. This tool does not do the enhanced tier, and says so rather than pretending.
• Places of worship, childcare, schools and further education stay in the standard tier however many people are expected. The Act does that itself, in Schedule 1.

What you get

• A public protection procedures document, built from your answers, with the section of the Act next to each procedure.
• A staff training plan and a record sheet to sign.
• A drill log with instructions on how to run one.
• A data sheet for notifying the regulator, which you submit yourself.
• A review checklist, and an e-mail when the review is due.

What this is not

• It is not a risk assessment. Nothing here judges how likely an attack on your premises is — that is a job for a security adviser, and neither the SIA nor the Home Office endorses any firm for it.
• It is not a badge, and there is no such thing. The Act creates no registration or accreditation scheme for premises.
• It does not notify the regulator for you. Section 9 puts that on the responsible person, and it stays there.
• It does not write anything by machine. Every sentence in every document was written by a person and is either quoted from the Act or from the Home Office guidance, or typed in by you.

Several people managing several sites? Start with the checker — the portfolio view comes with the account.