Martyn’s Law for restaurants and cafés: does it apply, and what to do

Does Martyn’s Law apply to restaurants and cafés?

The Terrorism (Protection of Premises) Act 2025 covers premises used for a listed purpose, in this case premises selling food or drink for consumption on site, where it is reasonable to expect 200 or more people, including staff, to be present at the same time from time to time. Covers plus kitchen and floor staff plus any private dining or terrace. Most independent restaurants are under 200; large chains, food halls and banqueting suites are over.

Between 200 and 799 people means standard tier. From 800 upwards the premises are enhanced tier, with much heavier duties: documented procedures and public protection measures submitted to the SIA, and penalties up to £18 million. If you are near that line, record how you set your capacity figure.

Typical examples in scope:

• large restaurants
• food halls
• banqueting suites
• cafés in visitor attractions

What you must do

The standard tier asks for three things, none of which cost money:

1. Notify the SIA. When the Act commences, expected spring 2027, the responsible person tells the Security Industry Authority they are responsible for the premises, through an online service the SIA is building. Nothing is submitted for approval.
2. Have four procedures in place, so far as reasonably practicable: evacuation, invacuation, lockdown and communication. The Act does not prescribe a document, but an inspector will ask to see what you have.
3. Make sure the people on duty know them. Staff, volunteers or hirers must be able to carry the procedures out quickly. A one-page briefing and a signed log is the practical way to show it.

There is no requirement for physical measures, security staff, CCTV or searches at the standard tier. The maximum penalty for non-compliance is £10,000.

What is different about restaurants and cafés

• Kitchens have their own exits and staff who cannot hear the front of house. Say how the kitchen is told.
• Customers with coats and bills unpaid will hesitate. The communication script should make clear that leaving without paying is expected.
• Food halls with multiple operators need one responsible person for the premises and a shared signal.
• Terraces and pavement seating are outside the building but can still be part of the premises; include them in evacuation and invacuation.

Five steps before spring 2027

1. Set your capacity figure: the most people, including staff, at your biggest regular event.
2. Name the responsible person and one day-to-day lead. Write both down.
3. Walk the building and decide three places: the outside assembly point, the safest room inside, and which doors can be locked.
4. Generate the procedures pack, correct anything that does not match the building, and print it.
5. Brief everyone on duty with the one-page sheet, log it, and put a review date in the diary.

Open the free generator with restaurant defaults .