Martyn’s Law for shops and retail premises: does it apply, and what to do

Does Martyn’s Law apply to shops and retail premises?

The Terrorism (Protection of Premises) Act 2025 covers premises used for a listed purpose, in this case retail, where it is reasonable to expect 200 or more people, including staff, to be present at the same time from time to time. Customers and staff at the busiest reasonable time. Large supermarkets, department stores, garden centres and shopping centres are in scope; a high-street independent almost never is.

Between 200 and 799 people means standard tier. From 800 upwards the premises are enhanced tier, with much heavier duties: documented procedures and public protection measures submitted to the SIA, and penalties up to £18 million. If you are near that line, record how you set your capacity figure.

Typical examples in scope:

• supermarkets
• department stores
• garden centres
• large DIY stores
• shopping centres
• retail parks with a shared management company

What you must do

The standard tier asks for three things, none of which cost money:

1. Notify the SIA. When the Act commences, expected spring 2027, the responsible person tells the Security Industry Authority they are responsible for the premises, through an online service the SIA is building. Nothing is submitted for approval.
2. Have four procedures in place, so far as reasonably practicable: evacuation, invacuation, lockdown and communication. The Act does not prescribe a document, but an inspector will ask to see what you have.
3. Make sure the people on duty know them. Staff, volunteers or hirers must be able to carry the procedures out quickly. A one-page briefing and a signed log is the practical way to show it.

There is no requirement for physical measures, security staff, CCTV or searches at the standard tier. The maximum penalty for non-compliance is £10,000.

What is different about shops and retail premises

• Shopping centres usually have a management company as the responsible person for the shared premises, with individual shops following its procedures.
• Trolleys, checkouts and stock rooms slow evacuation. Say which staff hold doors and which lead people to the assembly point.
• Invacuation in a large store usually means moving people away from the glazed frontage to the back of the store or stock areas.
• Security staff already deal with theft and disorder; add the four procedures to their briefing rather than creating a new team.

Five steps before spring 2027

1. Set your capacity figure: the most people, including staff, at your biggest regular event.
2. Name the responsible person and one day-to-day lead. Write both down.
3. Walk the building and decide three places: the outside assembly point, the safest room inside, and which doors can be locked.
4. Generate the procedures pack, correct anything that does not match the building, and print it.
5. Brief everyone on duty with the one-page sheet, log it, and put a review date in the diary.

Open the free generator with shop defaults .