If you manage a venue or publicly accessible space in the UK, you’ve probably heard a lot about Martyn’s Law (also known as the Protect Duty and the Terrorism (Protection of Premises) Act 2025). For many, the prospect of new legislation brings a mix of anxiety and confusion, especially when it comes to what’s actually required to stay compliant. As an access control supplier, we talk to venue owners and managers every day who are worried about what Martyn’s Law means for their business, their staff, and the people who visit their sites.
The good news? While Martyn’s Law does introduce new expectations around security and preparedness, it’s not about forcing everyone to install expensive, high-tech systems or follow a one-size-fits-all checklist. Instead, it’s designed to help you take proportionate, sensible steps to keep your venue – and the people in it – safer from terrorism and major threats.
What Does Martyn’s Law Actually Ask of You?
Martyn’s Law applies to publicly accessible premises that can accommodate 200 or more people at any one time. If your venue meets this threshold, you will be legally required to comply. But what does that mean you need to do?
The heart of Martyn’s Law is about understanding your risks and being ready to respond. Rather than prescribing a set of technical solutions, the law asks you to look at your venue through a security lens: Where might you be vulnerable? How could someone exploit your entry points or crowd flows? What would you do if the worst happened?
In practice, this means carrying out a risk assessment, making sure your staff are trained for emergencies, and putting reasonable, practical measures in place to manage those risks. For a small community centre, that might mean simple procedures and regular drills. For a stadium or concert hall, the expectations – and the solutions – will naturally be more robust.
Crucially, Martyn’s Law doesn’t demand that you adopt specific technologies like multi-factor authentication, biometrics, or cloud-based systems. The law is flexible and proportionate: it’s about doing what’s reasonable for your particular situation, not ticking boxes or investing in unnecessary tech.
While Martyn’s Law officially passed in April 2025, it includes a two-year implementation window. This means your venue must be fully compliant by 2027. However, proactive planning now will save time and stress later.
How Access Control Can Support Your Compliance (and Your Peace of Mind)
So, where does access control fit in? While you’re not legally required to install any particular system, modern access control can be a powerful tool in your security toolkit. Imagine being able to quickly see who’s on your premises, restrict access to sensitive areas, or lock down parts of your site at the touch of a button. These capabilities don’t just help you manage day-to-day risks – they can make a real difference in an emergency.
Take visitor management, for example. Even a simple sign-in process – digital or paper – can help you keep track of who’s on-site, which is invaluable if you ever need to account for people during an evacuation or incident. For larger venues, electronic systems can provide instant reports and support your risk assessments by showing patterns or potential vulnerabilities over time.
Access control can also play a key role in your staff training. Including access procedures in your emergency drills helps ensure everyone knows what to do if they need to secure the building or guide people to safety. And when it comes to demonstrating compliance, having clear records of your processes and reviews can show that you’re taking your responsibilities seriously.
Best Practice Features: Going Beyond the Minimum
Of course, some venues want to go further than the legal minimum – especially if they face higher risks or simply want to set the gold standard for safety. This is where advanced access control features come into play. Things like multi-factor authentication, biometric entry, real-time monitoring, and integration with emergency services can all add extra layers of protection.
It’s important to remember, though, that none of these features are mandated by Martyn’s Law. They’re best practice options, not legal requirements. For some venues, investing in these technologies makes sense; for others, simpler measures are perfectly adequate. What matters most is that your approach matches your risks and resources.
Data security is another area where best practices and legal compliance overlap. While Martyn’s Law doesn’t set specific rules for data protection, the UK’s GDPR regulations do. If you’re collecting or storing information about staff or visitors, you’ll need to make sure your systems are secure and your data handling is compliant.
What Should You Do Next?
If you’re feeling overwhelmed, you’re not alone. The key is to start with your risk assessment – look honestly at your venue, your operations, and your people. From there, think about the practical steps you can take to make your site safer, whether that’s tightening up entry procedures, improving staff training, or considering an access control solution that fits your needs and budget.
And remember: Martyn’s Law is about being prepared, not about buying the most expensive technology or following a rigid template. It’s about showing that you’ve thought carefully about your risks and taken reasonable, proportionate action to manage them.
The UK Government’s detailed Section 27 guidance, which will provide final compliance criteria for Martyn’s Law, is expected in late 2025. Until then, businesses should follow interim advice via ProtectUK. A good place to start is the Free e-learning on ProtectUK
As highlighted in the recent Martyn’s Law webinar, be cautious of unofficial training providers using misleading endorsements or imagery. Until the Section 27 guidance is officially released, most legitimate training resources are available free from the ProtectUK platform.
Effective compliance also requires collaboration between access control providers, fire & security system installers, venue managers and local authorities. A joined-up approach ensures realistic and resilient security planning.
As also discussed in the Martyn’s Law webinar, public expectations around venue safety are increasing. Attendees are more likely to question visible gaps in security. For example:
- Why wasn’t that bag checked at the entrance?
- Why are those fire exit doors open and unattended?
- How come no one stopped that person tailgating?
We’re Here to Help
As access control specialists, we’re here to guide you through the options – no jargon, no pressure, just practical advice based on your unique situation. Whether you’re looking for a simple visitor sign-in process or a fully integrated security system, we can help you find the right balance between compliance, safety, and peace of mind.
If you’d like to talk through your concerns or see what’s possible for your venue, get in touch. Together, we can help you prepare for Martyn’s Law in a way that’s sensible, effective, and tailored to you.
Further Reading & Official Guidance
For the latest updates and official advice, you should check the following resources:
