Martyn's Law for Retail: Shopping Centres and Large Stores

Why Retail Is in Scope

Shopping centres are some of the most obvious venues within the scope of Martyn's Law. A typical shopping centre holds thousands of people at peak times, making them enhanced tier premises with the full range of obligations. Even large standalone stores, retail parks, and department stores can reach the 200+ threshold when you count customers, staff, and visitors across all floors and areas.

Retail environments present specific challenges for compliance. They are open-access, high-footfall, and designed to encourage free movement. Security measures need to work within this commercial reality, not against it.

The Multi-Tenant Question

One of the most common questions in retail compliance is: who is the responsible person in a multi-tenant shopping centre?

The Act addresses this directly. The responsible person for the premises as a whole is the entity that has overall control. In a shopping centre, that is typically the landlord or the centre management company, not individual tenants. They are responsible for the common areas, the security infrastructure, and the overarching emergency procedures.

However, individual retailers within a shopping centre may also be in scope in their own right if their unit has a capacity of 200 or more. A large department store anchor tenant, for example, would need to comply with the Act for its own premises, separate from the centre's obligations. This creates a layered compliance structure where the centre management handles the overall framework and individual tenants manage their own procedures within that framework.

Customer Flow and Open Access

Unlike a concert venue or stadium, a shopping centre does not have a single entry point where everyone can be searched. People walk in from car parks, bus stops, and adjacent streets through multiple entrances. This makes perimeter-based security measures less practical and shifts the focus towards detection and response rather than prevention at the boundary.

Effective compliance in retail focuses on:

• CCTV coverage of all public areas, entrances, car parks, and service corridors
• Active monitoring of camera feeds rather than passive recording
• Staff awareness training for security teams and retail employees
• Vehicle mitigation at entrances vulnerable to vehicle-as-weapon attacks
• Crowd monitoring to detect unusual density or behaviour patterns
• Clear evacuation and lockdown procedures communicated to all tenants

Staff Training Across Multiple Employers

A shopping centre might have 50 different employers operating on the same premises. Coordinating training across all of them is a significant challenge. Centre management should provide a baseline training programme or pack that all tenants can use to train their staff. This ensures consistency in evacuation routes, communication protocols, and reporting procedures.

Security staff employed by the centre management company should receive more detailed training covering terrorism risk indicators, hostile reconnaissance patterns, response protocols, and coordination with emergency services.

Technology in Retail Environments

Retail environments typically have extensive CCTV already in place. The challenge is not having cameras, it is making them useful. A shopping centre with 500 cameras and two people in a control room cannot effectively monitor all feeds. AI behaviour detection transforms this equation by analysing every feed simultaneously and flagging anomalies for human review.

For retail, AI monitoring can detect:

• Individuals conducting hostile reconnaissance (repeated visits, photographing security measures, testing response times)
• Unattended bags or packages in public areas
• Aggressive behaviour or altercations that could escalate
• Crowd density building in specific areas beyond safe levels
• Vehicles behaving unusually in car parks or near pedestrian areas

Practical Steps for Retail Operators

1. Determine your tier based on peak capacity across the entire premises.
2. Clarify responsibilities between centre management and individual tenants. Put agreements in writing.
3. Conduct a terrorism risk assessment covering all public areas, entrances, car parks, and service areas.
4. Audit your CCTV for coverage gaps and move from passive recording to active monitoring.
5. Develop centre-wide procedures and communicate them to all tenants.
6. Implement a tenant training programme that provides consistent baseline knowledge.
7. Test your plans with tabletop exercises involving tenant representatives and emergency services.