Martyn's Law Is Now Enacted — What Venue Operators Must Do Next

Martyn's Law — formally the Terrorism (Protection of Premises) Act — is now enacted. Named after Martyn Hett, one of 22 people killed in the Manchester Arena attack in 2017, the legislation places a statutory duty on those responsible for qualifying public venues and events to implement protective security measures proportionate to their tier.

For many venue operators, the question is no longer whether this applies to them — it is whether their current arrangements will satisfy it.

Who Does It Affect?

The duty applies to two tiers. The standard tier covers venues with a capacity of 200 or more, requiring basic security awareness training and documented procedures for protecting the public. The enhanced tier applies to venues with a capacity of 800 or more — including concert halls, sports stadiums and major event spaces — and requires a formal security assessment, a written security plan aligned to National Protective Security Authority (NPSA) guidance, and trained staff capable of responding effectively to an attack, including a marauding terrorist attack (MTA).

What Does Compliance Actually Require?

For enhanced tier venues, compliance is not a single document — it is a framework. It requires an independent security assessment that identifies your specific risk profile, a written plan proportionate to that risk, and staff who understand what they are expected to do and have practised it. A checklist completed internally will not meet the standard.

Standard tier venues face a lighter requirement, but it still demands evidence of structured awareness — not just a policy that exists on a shared drive.

The Risk of Getting This Wrong

Non-compliance carries regulatory penalties. But the more significant risk is operational: a venue that has not genuinely assessed its security arrangements is a venue with unknown gaps. Martyn's Law was created because lives were lost in a venue where protective measures were not proportionate to the threat. The legislation exists to make that less likely.

How We Can Help

Colin Morgan Consulting has worked with venue operators on Martyn's Law readiness since before the legislation was enacted. Our assessments are NPSA-aligned, conducted by a Chartered Security Professional, and proportionate to your venue's specific risk profile. We do not apply a template — we assess your actual environment, identify genuine gaps, and give you a clear, honest picture of what is required.

If you would like to discuss your Martyn's Law obligations, please get in touch. We will tell you straightforwardly what compliance looks like for your venue.