Martyn’s Law: What Businesses Need to Know Before April 2027

The Terrorism (Protection of Premises) Act 2025, commonly known as Martyn’s Law, is now on the statute books. Named after Martyn Hett, one of the 22 victims of the 2017 Manchester Arena attack, it represents the most significant shift in UK public venue security legislation in decades. And with enforcement expected from April 2027, the preparation window is already open.This article explains what the law requires, who it affects, and how communication sits at the heart of compliance.

What Is Martyn’s Law?

Martyn’s Law places a legal duty on those responsible for certain publicly accessible premises and events to prepare for and respond to the threat of terrorism. It does not require expensive consultants or specialist infrastructure. The government has been clear that the intent is proportionate, practical preparedness, not box-ticking.The legislation was granted Royal Assent on 3 April 2025. The government intends for there to be an implementation period of at least 24 months before enforcement begins, meaning April 2027 is the earliest date compliance will be legally required, though organisations are strongly encouraged to begin preparing now.The Security Industry Authority (SIA) has been named as the official regulator and will oversee compliance, offer guidance, and where necessary take enforcement action.

Who Does It Apply To?

The Act applies to premises where it is reasonable to expect 200 or more individuals to be present at the same time, and which are publicly accessible. This covers a broad range of organisations, including:

• Retail and hospitality venues
• Entertainment and leisure facilities
• Places of worship
• Schools, colleges and universities
• Healthcare and public service buildings
• Transport hubs
• Community and event spaces

The law establishes two tiers based on capacity:Standard Tier (200–799 people) Focused on simple, low-cost steps to improve staff readiness and reduce harm in the event of an incident. Requirements include identifying the responsible person, notifying the SIA, reviewing procedures for evacuation, invacuation and lockdown, and ensuring basic terrorism awareness training is in place.Enhanced Tier (800+ people) Additional requirements apply, including a formal vulnerability assessment, a documented public protection plan submitted to the SIA, and measures to actively reduce risk, such as monitoring of the premises and immediate vicinity.

Why Communication Is Central to Compliance

For both tiers, the ability to communicate quickly and clearly during an incident is fundamental, not optional. Whether instructing staff to initiate a lockdown, directing visitors to a safe location, or coordinating with emergency services, slow or fragmented communication increases risk.The standard tier specifically requires organisations to have procedures in place for evacuation, invacuation, lockdown and communication. The enhanced tier goes further, requiring those procedures to be formally documented and demonstrably effective.This is where many organisations face a practical challenge. In an emergency, relying on personal mobile phones, email chains, or manual call trees is too slow and too unreliable. Instructions get missed. Messages get lost. Staff on different floors or in different areas of a venue may receive conflicting information, or none at all.

How Respondal Supports Martyn’s Law Preparedness

Respondal’s WhatsApp Business Platform enables organisations to send instant, centrally controlled messages to large groups, staff, volunteers, students, or registered contacts, through a channel they already use every day.In the context of Martyn’s Law, this means:

• Rapid broadcast messaging – reach everyone on-site instantly with clear, consistent instructions
• Two-way communication – allow key contacts to confirm receipt or report their location when needed
• Consistent, controlled messaging – avoid conflicting instructions by ensuring all communication comes from a single source
• Testable in drills – embed WhatsApp messaging into tabletop exercises and rehearsal scenarios so staff know exactly where instructions will come from
• Auditable records – maintain a documented communication trail that can support evidence of preparedness if required by the SIA

It is worth noting, as the government itself has stated, that compliance with Martyn’s Law does not require organisations to purchase specialist products. What it does require is that organisations can demonstrate they have thought carefully about communication during an incident, and have a credible, tested plan in place. Respondal is one practical way to meet that expectation using infrastructure your team already understands.

What Should Organisations Be Doing Now?

With enforcement expected from April 2027, there is time to prepare, but not unlimited time, particularly for larger organisations with more complex requirements. A reasonable approach between now and the implementation date would include:

1. Determine whether your premises are in scope – check capacity thresholds and whether your venue is publicly accessible under the Act’s definition
2. Identify your tier – standard or enhanced, and understand what each requires
3. Review your current communication procedures – how would you reach everyone on-site in the first two minutes of an incident?
4. Test your plan – run a tabletop exercise that includes a communication scenario
5. Document everything – even if not yet legally required, evidence of preparation is good practice and will be expected by the SIA when enforcement begins

The Home Office and SIA have published guidance and free resources at GOV.UK and ProtectUK. These are the authoritative starting points for any organisation working through its obligations.

A Final Word

Martyn’s Law exists because of a tragedy that could have been mitigated with better preparation. The legislation is not designed to be punitive or burdensome. It is designed to ensure that the organisations responsible for public spaces have thought seriously about what they would do, and how they would communicate, if the worst were to happen.For any organisation that hasn’t yet started that conversation, April 2027 is closer than it looks.