Martyn’s Law for Hospitality Venues: What to Have Ready by Spring 2027

Martyn’s Law applies to any qualifying venue where 200 or more people, including staff, can reasonably be expected at the same time. It is expected to come into force in spring 2027, and for most pubs, clubs and restaurants it asks for clear procedures and briefed staff rather than new equipment.

The Terrorism (Protection of Premises) Act 2025 received Royal Assent on 3 April 2025. It is known as Martyn’s Law after Martyn Hett, one of 22 people killed in the Manchester Arena attack in 2017, and it follows years of campaigning by his mother, Figen Murray.

The Home Office published its statutory guidance on 15 April 2026. The Security Industry Authority (SIA), which will regulate the new rules, has said it expects the law to come into force in spring 2027, with the exact date to be confirmed through Parliament.

That leaves one winter to get ready, and winter is when a busy venue has the least spare time. Here is what the law actually asks of hospitality venues, and where the technology you may already have can help.

Does Martyn’s Law apply to my venue?

According to the Home Office factsheet, premises are in scope if they meet four tests:

  • The site includes at least one building, or a building and other land.
  • It is wholly or mainly used for a purpose listed in the Act, which includes restaurants, shops and other hospitality and leisure uses.
  • It is reasonable to expect at least 200 people to be there at the same time, at least some of the time.
  • It is not specifically excluded by the Act.

In scope venues fall into one of two tiers:

  • Standard tier: 200 to 799 people.
  • Enhanced tier: 800 people or more.

How do I count my capacity?

Staff count towards the total. So does your peak, not your average. A members’ club that is half empty on a Tuesday but hosts 250 on derby day is likely to be in scope. So is a pub whose function room fills for Christmas parties.

The Home Office accepts methods you may already use, such as your fire safety occupancy calculation or your own historic data. It has also published a supplementary document on counting methods alongside the statutory guidance. Because premises can include land as well as buildings, think about beer gardens and outdoor areas when you count.

What does the standard tier require?

Two things. You must notify the SIA that you are responsible for the premises, and you must have appropriate public protection procedures in place, so far as is reasonably practicable. The standard duty factsheet sets out four procedures:

  • Evacuation: getting people out of the building, or part of it, away from danger.
  • Invacuation: moving people to a safer place inside, which can mean bringing people in from outside.
  • Lockdown: securing the premises so nobody can get in or out, for example by locking doors and closing shutters.
  • Communication: telling people what is happening and what to do, as quickly as possible.

Staff must also know the procedures and their own part in them. The guidance is blunt on this point: an evacuation plan that nobody on shift understands does not count.

What does that look like in a real venue?

The Home Office gives the example of a 400-seat restaurant. Its procedures might include two exit routes, a plan to move diners into the main restaurant and staff areas, and named staff who know how to lock doors, close shutters and turn off lights when the shift manager tells them to. New staff get a short briefing at induction, alongside fire and health and safety, and the procedures are reviewed once a year.

That is the level of detail the standard tier is aiming for. It is practical, specific to the building and short enough for a new starter to remember.

Do I need to buy new security equipment?

No. The standard duty factsheet states that the Act does not require physical alterations or the purchase of specific equipment, and the Home Office says costs for standard tier venues relate mainly to staff time. It also says venues do not need to pay consultants to comply, and that neither the Home Office nor the SIA endorses any third-party product.

We would rather you heard that from us than found out after buying something you did not need. That said, the guidance also notes that in some circumstances changes to equipment may be reasonably practicable. That is where the doors, cameras and screens you already have can make your procedures easier to carry out.

Where can the technology you already have help?

Lockdown: can you secure every door quickly?

Walk your building and time how long it takes to lock every public entrance. In a venue with several doors, a cellar hatch and a beer garden gate, it can take longer than you expect.

With electronic access control, a manager may be able to secure doors from one place, depending on the system and how it is set up. Fire safety still comes first. Doors on escape routes must release when the fire alarm sounds, which is why we fitted fail-safe locks with green emergency releases at Add People’s office. Any lockdown plan has to work alongside your fire strategy, not against it.

Our guide to access control for pubs, bars and clubs explains the options in plain terms.

Communication: how would you tell everyone at once?

Picture a busy Saturday with music playing. How would you tell 300 people to stay where they are? Options include:

  • A microphone on the music or PA system that managers know how to use
  • A phone system that can reach every handset in the building at once
  • Digital screens that can show an instruction straight away
  • A staff group message, set up in advance, for teams spread across floors

Awareness: can you see what is happening at the door?

CCTV lets a manager see entrances, outside areas and car parks from one screen or a phone. That is not a requirement for the standard tier, but it helps whoever is in charge decide which procedure to use. Our post on smart CCTV for pubs, bars and clubs covers what modern cameras can do.

What extra does the enhanced tier ask for?

Venues expecting 800 or more people, such as large clubs, theatres and stadium hospitality, have further duties. They must:

  • Put in place public protection measures, so far as reasonably practicable, to reduce both the risk of an attack and the harm it could cause. The factsheet gives monitoring of the premises and the area around them as an example.
  • Write down their procedures and measures and give that document to the SIA.
  • Name a senior individual responsible for compliance, if the responsible person is an organisation.

Law firm Lewis Silkin’s summary of the statutory guidance groups those measures into monitoring, movement, physical security and information security.

What should you do between now and spring 2027?

  1. Work out your capacity. Use your busiest realistic day, include staff and write down how you calculated it.
  2. Confirm who is responsible. It is the person or organisation in control of the premises, which may be a company rather than the licensee.
  3. Walk the building. Note every exit, every lockable door and shutter and every room where people could shelter.
  4. Write one page per procedure. Keep it short and specific to your building.
  5. Brief every member of staff. Add it to induction, including for seasonal staff taken on this Christmas.
  6. Test it. Time a lockdown. Try your communication method on a quiet afternoon.
  7. Watch for the SIA notification process. You will need to register your premises once it opens.
  8. Review it every year, and whenever the layout or use of the building changes.

ProtectUK, run by Counter Terrorism Policing, publishes free guidance and training resources to help.

Frequently asked questions

  • When does Martyn’s Law come into force?
    The SIA expects it to come into force in spring 2027, after an implementation period of at least 24 months from Royal Assent in April 2025. The exact date will be confirmed through Parliament.
  • Does Martyn’s Law apply to small pubs?
    Only if 200 or more people, including staff, can reasonably be expected on the premises at the same time. Venues below that number are outside the Act, although good planning for evacuation and lockdown is still sensible.
  • Do staff count towards the 200 threshold?
    Yes. The capacity thresholds include staff as well as customers.
  • Do I need CCTV to comply with Martyn’s Law?
    Not at the standard tier, which does not require you to buy equipment. Enhanced tier venues must consider measures such as monitoring the premises and the area around them, so far as is reasonably practicable.
  • Who enforces Martyn’s Law?
    The Security Industry Authority. Where there is serious or persistent non-compliance it can issue compliance notices, monetary penalties and restriction notices, and the Act also contains some criminal offences.

Start with the plan, then look at the building

For most hospitality venues, Martyn’s Law is about knowing what you would do and making sure your team knows it too. Write the procedures first. Then look at whether your doors, cameras and screens make those procedures quicker and easier to follow.

Want a practical view of your venue? Talk to CCR Systems and we will walk the building with you, looking at your doors, cameras and how you would reach everyone inside. If what you have is already enough, we will tell you. Call 0151 644 8296.

Sources

Make an Enquiry
Fill out the form below, and we will be in touch shortly.
Your Name