What should be on a Martyn's Law checklist?
Updated · UK law and HSE guidance
Short answer
A useful Martyn's Law checklist starts by testing whether the premises or event is in scope and identifying the responsible person. It then records the number of people reasonably expected at the same time, assigns the correct tier, prepares evacuation, invacuation, lockdown and communication procedures, and makes workers aware of them. Enhanced tier premises and qualifying events also need measures, documented assessments, review arrangements and senior oversight. This checklist supports preparation but does not itself establish compliance.
| Step 1 | Confirm premises or event scope |
|---|---|
| Step 2 | Identify the responsible person |
| Step 3 | Assess the reasonable attendance figure and tier |
| Step 4 | Prepare four public protection procedures |
| Enhanced step | Add measures, documentation, review and senior oversight |
1. Check whether the Act applies
Complete the premises and event tests before working through operational controls. Premises and events use different statutory criteria, and a location outside the premises provisions can still host a qualifying event. Record the evidence and any assumptions used.
- Confirm that the premises contain a building or consist of a building with land
- Confirm that the premises are wholly or mainly used for a Schedule 1 purpose
- Record the greatest number of people reasonably expected at the same time, including workers
- Check Schedule 2 exclusions and special rules for worship, childcare and education
- For an event, check public access, 800-person attendance, entry conditions and the location rules
2. Record responsibility and interfaces
Identify the individual or organisation with control for the relevant use or event. Responsibility follows statutory control, not simply ownership or the name on a template. A responsible person can assign work but cannot contract away legal accountability.
- Record the responsible person's legal name and contact details
- State why that person controls the premises or event
- Map landlords, tenants, event organisers and contractors with relevant control
- Set out required co-operation and co-ordination
- For an enhanced tier organisation, designate an eligible senior individual
3. Prepare the four procedures
For each procedure, decide what is appropriate for the actual site and then what is reasonably practicable. Consider the nature and resources of the premises, the benefit of the step, its cost, time and difficulty, and the safety of the people expected to carry it out.
- Evacuation: routes and decisions that move people away from the danger
- Invacuation: safer places inside and ways to move people there
- Lockdown: available doors, shutters, barriers and decision authority
- Communication: warnings, instructions, accessible methods and backup methods
- Brief workers and check that the procedures can be understood and used
4. Add enhanced tier measures
Enhanced tier premises and qualifying events must consider the procedures and measures as one system. Measures must be appropriate and reasonably practicable, reduce physical harm and reduce vulnerability to attack. They must be kept under review.
- Monitoring of the premises, event and immediate vicinity
- Movement of people into, out of and within the site
- Physical safety and security
- Security of sensitive information
- Where needed to make measures effective, role-specific instruction, training and supervision; this is not a prescribed course
- Consider contingencies for equipment failure or unavailable staff
5. Complete the required records
Standard tier premises are not legally required to submit a procedures document, although Home Office guidance recommends documenting procedures. Enhanced tier responsible persons must prepare and provide the SIA with a document that states the procedures and measures and assesses how they meet the statutory objectives.
An enhanced document must include measures planned for later where immediate implementation is not reasonably practicable. Keep it up to date and provide a revised version to the SIA within 30 days of revision. No particular commercial template is mandatory.
- State the procedures in place
- State measures in place and measures planned
- Assess reduction of physical harm and vulnerability
- Explain deferred measures and interim arrangements
- Control versions and record review dates
6. Plan notification and ongoing review
The SIA notification duty will apply when the relevant provisions commence. The portal is not yet open. As at 4 October 2026, spring 2027 is the expected commencement period, but no exact date has been confirmed.
Use the implementation period to test arrangements and monitor official updates. The Act expressly requires enhanced public protection measures to be kept under review. Keeping all procedures current is also strongly recommended, particularly after changes to layout, use, staffing or attendance.
- Follow Home Office and SIA commencement updates
- Notify only through the official process once available
- Update the SIA when notified information becomes inaccurate: within 28 days for premises or 14 days for an event
- Test procedures and record lessons
- Reassess scope and tier after material operational changes
7. Check what the checklist does not prove
A completed checklist or risk assessment is not a certificate of Martyn's Law compliance. Compliance depends on the responsible person making suitable, site-specific decisions and putting the required procedures and measures into practice. The SIA and Home Office do not endorse commercial compliance providers.
SitePaper can help organise a general risk assessment for review, but its template does not replace the Act, statutory guidance, competent judgement or the enhanced tier document that must meet section 7.
- Do not copy controls from a different site without checking suitability
- Do not describe voluntary good practice as a statutory duty
- Do not treat a purchased course as official approval
- Escalate complex scope or legal questions for suitable professional advice
Sources
- Terrorism (Protection of Premises) Act 2025, Part 1
- Home Office: Martyn's Law statutory guidance
- Home Office: Methods for assessing the reasonable expectation of people present
- Home Office: Martyn's Law notification requirement
- SIA: Understanding Martyn's Law and the SIA's role as regulator
- ProtectUK: Martyn's Law frequently asked questions
This guide summarises UK law and HSE guidance for small businesses. It is not legal advice; check the sources and your own circumstances.