Martyn's Law FAQ: Common Questions Answered

Does Martyn's Law Apply to My Venue?

If your premises has a maximum capacity of 200 or more people (including staff), it is likely in scope. The Act applies to a wide range of premises including hotels, shops, entertainment venues, places of worship, education settings, and public buildings. If you are unsure, calculate your maximum occupancy and check against the 200-person threshold.

How Is Capacity Calculated?

Capacity means the maximum number of individuals who could be on the premises at any one time. This includes customers, guests, staff, contractors, visitors, and anyone else present. Use your fire safety assessment or licensed capacity as a starting point, then factor in staff numbers and areas not covered by your licence.

Who Is the "Responsible Person"?

The responsible person is the individual or entity with overall control of the premises. For an owner-operated venue, it is the owner. For a managed premises, it is the person with day-to-day control. For a company, it may be the company itself, with a specific individual designated to manage compliance. The responsible person carries the legal accountability for ensuring the venue meets its obligations under the Act.

What Are the Penalties for Non-Compliance?

The Act gives the SIA enforcement powers including compliance notices, restriction notices (which can limit or close operations), and financial penalties. For the most serious breaches, penalties can be significant. The exact penalty framework will be confirmed by the SIA, but the Act allows for fines of up to a specified maximum for standard tier and higher amounts for enhanced tier non-compliance. The message is clear: non-compliance carries real consequences.

Do I Need to Hire Security Staff?

Not necessarily. The standard tier does not require dedicated security personnel. It requires documented procedures and trained staff. Your existing team, properly trained, can fulfil the standard tier requirements. Enhanced tier venues may need professional security support depending on their risk assessment and the measures they need to implement, but the Act does not mandate specific staffing levels.

Does My Existing CCTV Count Towards Compliance?

Yes, but with caveats. Having cameras installed is a start, but the Act is about active protection, not passive recording. For standard tier venues, working CCTV that is recorded and retained is a useful part of your overall posture. For enhanced tier venues, the expectation is closer to active monitoring. If your cameras are recording to a hard drive that nobody checks, that alone does not demonstrate proportionate security measures. AI behaviour detection turns passive CCTV into an active monitoring system.

How Does AI Help With Compliance?

AI behaviour detection analyses your existing CCTV feeds in real time, flagging potential security concerns for human review. It detects aggressive behaviour, unusual loitering, unattended items, crowd density issues, and other patterns that indicate a possible threat. This provides the documented, active monitoring that enhanced tier venues need, and gives standard tier venues an easy way to exceed the minimum requirements. It works with your existing cameras, so there is no need to rip out and replace your current system.

What If I Am a Tenant in a Larger Premises?

If you are a tenant in a shopping centre or similar multi-tenanted building, the responsibility for the overall premises sits with whoever has overall control, usually the landlord or management company. However, if your individual unit has a capacity of 200 or more, you may also have obligations for your own space. Clarify with your landlord who is responsible for what, and ensure your own procedures are aligned with the building's overarching plan.

When Does Enforcement Actually Start?

The Act received Royal Assent in April 2025 and includes a 24-month implementation period. Enforcement is expected to begin around April 2027. During the implementation period, the SIA will set up its regulatory framework, publish guidance, and open registration. Use this time to prepare rather than waiting until the deadline approaches.

What If My Venue Is Below 200 Capacity?

If your premises has a maximum capacity below 200, you are not in scope and have no legal obligations under the Act. However, good security practice benefits venues of any size. The principles behind Martyn's Law, having procedures, training staff, and being aware of risks, make sense for any venue that welcomes the public.

Do I Need to Do a Risk Assessment?

A formal terrorism risk assessment is required for enhanced tier venues (800+ capacity). Standard tier venues are not required to conduct one, but it is strongly recommended. You cannot develop effective procedures without understanding what you are protecting against. Even a basic assessment of your vulnerabilities and the measures you could take is better than nothing.

Can I Get Help With Compliance?

Yes. Local Counter Terrorism Security Advisors (CTSAs) offer free, confidential advice to venues. National bodies for specific sectors (hospitality, education, retail, faith) are developing guidance. The SIA will publish detailed guidance during the implementation period. And technology providers, including AI behaviour detection platforms, can demonstrate how their systems support compliance.