Martyn’s Law · Standard tier · In force spring 2027
Four procedures. One document. Before spring 2027.
The Terrorism (Protection of Premises) Act 2025 asks every venue that can hold 200 people to name a responsible person, notify the SIA, and have evacuation, invacuation, lockdown and communication procedures in place. Check whether it applies to you, then build the procedures pack from a few questions. Free, no sign-up, and your answers never leave this tab.
- Royal Assent
- 3 April 2025
- Expected commencement
- Spring 2027
- Standard tier
- 200–799 people
- Maximum penalty, standard tier
- £10,000
Step 01
Does it apply
to you?
Three questions decide it: what the premises are used for, how many people can reasonably be there at once, and whether the public can come in.
№ 01 — What kind of premises
Customers and staff at the busiest reasonable time. Large supermarkets, department stores, garden centres and shopping centres are in scope; a high-street independent almost never is.
№ 02 — Most people at one time, including staff
Think of the biggest regular event, not an average day. The Act asks what is reasonable to expect from time to time.
№ 03 — Who can be there
Result
Standard tier
Between 200 and 799 people means standard tier. You must notify the SIA that you are the responsible person and have evacuation, invacuation, lockdown and communication procedures in place, so far as reasonably practicable, by spring 2027. No physical measures are required.
Based on the Act and ProtectUK guidance as at 2026-09. Not legal advice. Runs in your browser; nothing is sent to us.
The duties
What the standard tier asks
Deliberately light. There is nothing to buy. The cost is time: writing the four procedures down, telling the SIA who you are, and briefing whoever is on duty so they can act without waiting to be told.
№ 01
Notify the SIA
When the Act commences, the responsible person tells the Security Industry Authority that they are responsible for the premises, through an online service the SIA is building. Standard tier is notification only; nothing is submitted for approval.
№ 02
Have four procedures in place
Evacuation, invacuation, lockdown and communication, so far as reasonably practicable. The Act does not demand a particular document, but an inspector will ask to see what you have. This generator writes it.
№ 03
Make sure people know them
The people who run the premises, whether staff, volunteers or hirers, must know the procedures well enough to carry them out fast. A one-page briefing sheet and a signed log are the practical answer.
The four procedures
- EvacuationGetting people safely out of the premises.
- InvacuationMoving people away from danger to a safer place inside the premises.
- LockdownSecuring the premises to stop people entering or leaving.
- CommunicationMaking sure people at the premises are told what is happening and what to do.
Which tier
| Under 200 people | Out of scope. Count staff, and count the biggest regular event rather than a typical day. |
| 200 to 799 people | Standard tier. Notify the SIA and have the four procedures in place. No physical measures. Penalties up to £10,000. |
| 800 or more people | Enhanced tier. Notification, documented procedures and public protection measures submitted to the SIA. Penalties up to £18 million or 5% of revenue. |
| Places of worship, schools, childcare | Standard tier from 200 people upwards, whatever the size. A 1,500-seat cathedral has the same duties as a 200-seat chapel. |
| Staff-only premises | Excluded under Schedule 2, along with transport premises and some others. If the public are ever admitted, reassess. |
Step 02
Build the
procedures pack
Walk the building once with the five boxes on the left. You get Part A, the procedures written for your premises; Part B, a one-page sheet to pin up and hand to hirers; and Part C, the notification record, briefing log and annual review checklist. Print to PDF from your browser.
№ 01 — The premises
What the document is for.
№ 02 — Who is responsible
The organisation with control of the premises, and the person who leads day to day.
№ 03 — The places that matter
Walk the building with these three questions. They become the heart of the procedures.
№ 04 — How the building is used
№ 05 — Raising the alarm
Everything you could use to tell people to move. The fire alarm only ever means evacuate.
Fill in the premises name, the responsible organisation and the maximum number of people to enable download. The preview updates as you type.
After you print it
The pack has a review date on page 1 and a briefing log nobody remembers to revisit. We can remind you.
- Review reminder two weeks before the date on page 1, then yearly
- Re-brief nudge six months after generating
- One email when the SIA notification service opens (expected spring 2027)
- One email if the SIA guidance changes what the pack should say
A: Part Procedures · Prepared 28 September 2026 · Review by 28 September 2027
Public Protection Procedures: the premises
About this document
These are the public protection procedures for the premises, prepared under the Terrorism (Protection of Premises) Act 2025, known as Martyn’s Law. They set out what the people running the premises will do to reduce the risk of physical harm if a terrorist attack happens at, or near, the premises.
With a reasonable expectation of up to 200 people present at the same time, these are standard tier premises (200 to 799).
| Item | Detail |
|---|---|
| Premises | the premises |
| Address | to be completed |
| Type of premises | Village hall (community centre or hall) |
| Responsible person | the management committee |
| Lead contact | to be named |
| Maximum people at one time (incl. staff) | to be completed |
| Prepared on | 28 September 2026 |
| Review by | 28 September 2027 |
Generated with the free SME Solutions Martyn’s Law generator (smesolutions.uk/martyns-law), template 2026-09. It is a starting point built from your answers and the published guidance on the Terrorism (Protection of Premises) Act 2025, not legal advice. Walk the building with it, change anything that does not match reality, and check ProtectUK for the SIA’s final statutory guidance before spring 2027.
The premises
the premises is a village hall on one floor, with the marked exits. It is in regular weekly use, run by hirers and committee members.
A fire risk assessment and fire evacuation plan are already in place. The evacuation procedure below builds on them; the other three procedures are additional.
Responsible person and notification
The responsible person for these premises is the management committee, being the person with control of the premises for their qualifying use. The day-to-day lead is to be named.
When the Act comes into force (expected spring 2027), the responsible person must notify the Security Industry Authority (SIA) that they are responsible for these premises, using the SIA’s online notification service. The standard tier requires notification only; no documents have to be submitted. Record the notification in Part C of this pack.
Keep this document where hirers and committee members on duty can find it, alongside the fire notice. A copy should be given to anyone who hires or supervises the premises.
Deciding to act
Anyone on duty may start any of the four procedures. Nobody needs permission. If in doubt, act: a false alarm costs minutes, hesitation can cost lives. The person in charge at the premises is the hirer named on the booking, or a committee member if one is present.
Signs that a procedure may be needed:
- Shouting, screaming, bangs or shots, inside or outside
- People running away from something, or a crowd surging
- A vehicle driven at people or into the building
- A person with a weapon, or an unattended bag or item that looks out of place
- A police instruction, a warning from a neighbouring premises, or an official alert
The police advice for anyone caught up in an attack is RUN, HIDE, TELL: run to a place of safety if there is a safe route; if you cannot, hide, turn your phone to silent and stay out of sight; when it is safe, tell the police by calling 999.
Procedure 1: Evacuation
Use when the danger is inside the building, or the police tell you to leave. Do not evacuate towards a danger that is outside; use invacuation instead.
- Raise the alarm using voice: staff calling out and going room to room. Say clearly and repeatedly: “Leave the building now by the nearest safe exit.”
- Direct people to the nearest safe exit. There are the marked exits. Do not send people through an exit that leads towards the danger.
- Go to the assembly point shown on the fire notice. If the assembly point shown on the fire notice is in the direction of the danger, the hirer named on the booking, or a committee member if one is present chooses another open area away from the building and away from glass and parked vehicles.
- Leaders of children’s groups and anyone supervising people with reduced mobility take their group with them and count them. Nobody is left to wait for help without someone staying with them.
- Do not stop to collect coats, bags or belongings.
- Once outside, keep moving away from the building. Do not gather at the doors or by windows.
- Call 999 as soon as it is safe (see Procedure 4). Tell the operator what is happening, where, and how many people are involved.
- Do not re-enter the building for any reason until the police say it is safe.
- The hirer named on the booking, or a committee member if one is present accounts for people as far as possible and tells the police who may still be inside.
The fire evacuation plan and this procedure use the same exits and assembly point. The difference is that a terrorist incident may make the usual route or assembly point unsafe, so the person in charge may need to choose another.
Procedure 2: Invacuation
Use when the danger is outside or nearby, and leaving the building would expose people to it. The invacuation area at the premises is the room furthest from the entrance and external windows.
- Raise the alarm using voice: staff calling out and going room to room. Do not use the fire alarm. Say clearly: “Move away from the windows and doors, into the room furthest from the entrance and external windows, now.”
- Move everyone to the room furthest from the entrance and external windows, including people outside in gardens, car parks or terraces if they can reach the building safely.
- Close all doors behind you. Keep people away from windows and external doors, and out of sight from outside.
- Turn off lights if it is safe and practical, and ask people to silence their phones and stay quiet.
- Group leaders keep their groups together and count them. Reassure children and anyone who is distressed.
- Call 999 as soon as it is safe. Tell the operator where you are, how many people are with you, and what you can see or hear.
- Stay in place until the police give the all-clear in person or by phone. Do not open doors to check.
- If the danger moves inside the building, switch to Procedure 3 (lockdown) or, if there is a safe route out, Procedure 1 (evacuation).
Procedure 3: Lockdown
Use when someone is trying to get into the premises to cause harm, or when the police instruct you to lock down. Lockdown is invacuation plus securing the building.
Some external doors at the premises can be locked; The hirer named on the booking, or a committee member if one is present holds the keys. Doors that cannot be locked are closed and blocked with heavy furniture.
- Raise the alarm as for invacuation. Say clearly: “Lockdown. Lock and block the doors, move away from the entrance, now.”
- Lock every external door. Close and block any that cannot be locked with tables, chairs or cupboards.
- Move everyone to the room furthest from the entrance and external windows, away from doors and windows and out of sight.
- Turn off lights, silence phones, and keep people quiet. Close internal doors and block them if the attacker is inside the building.
- Call 999. Describe the attacker, where they are, what they are carrying, and where you and other people are.
- Do not open any door for anyone until the police confirm who they are. Officers will identify themselves clearly.
- If the attacker breaks in and there is a safe route out, leave by it. If there is no way out, be ready as a last resort to act together to stop them.
- Stay locked down until the police give the all-clear in person.
Procedure 4: Communication
How the alarm is raised at the premises:
- Evacuation: voice: staff calling out and going room to room.
- Invacuation and lockdown: voice: staff calling out and going room to room (never the fire alarm, which would send people outside).
- Hirers and committee members go room to room to make sure every space, including toilets, kitchens, changing rooms and outdoor areas, has heard the instruction.
Calling 999: the hirer named on the booking, or a committee member if one is present calls; if they cannot, anyone does. Give the address (the full address), what is happening, exactly where, how many attackers and any weapons, whether anyone is hurt, and where people are sheltering. Stay on the line if it is safe.
What to say to people, in short, calm sentences:
| Procedure | Instruction |
|---|---|
| Evacuation | “Leave the building now by the nearest safe exit. Go to the assembly point. Do not stop for belongings.” |
| Invacuation | “Move away from the windows and doors into the room furthest from the entrance and external windows. Close the doors. Stay quiet and wait for the police.” |
| Lockdown | “Lockdown. Lock and block the doors. Move out of sight. Silence your phones. Do not open the door to anyone.” |
| All-clear | “The police have told us it is safe. Please stay together until we have checked everyone is here.” |
Hirers running events are told these procedures at booking and at key handover, and are given the briefing sheet in Part B. During a hire, the hirer is the person in charge unless a committee member is present.
Before an incident: report anything suspicious to the police on 101 or the confidential anti-terrorist hotline 0800 789 321. In an emergency always call 999. Free Action Counters Terrorism (ACT) awareness e-learning is available through ProtectUK and takes under an hour.
Awareness of hirers and committee members
The procedures only work if the people on duty know them. At the premises:
- Every new hirer is briefed using the Part B sheet before their first hire.
- Everyone on duty is re-briefed at least once a year, and before any event expected to bring in more people than usual.
- The hirer named on the booking, or a committee member if one is present walks the building with the sheet once a year: exits, the assembly point shown on the fire notice, the room furthest from the entrance and external windows, where the keys are.
- Briefings are recorded in the Part C attendance log.
- Where practical, a short walk-through exercise of one procedure is run each year. It does not need to involve the public.
Review
These procedures are reviewed by 28 September 2027, and sooner if any of the following happen: the layout, exits or capacity change; the use of the premises changes; an incident, alarm or exercise shows a weakness; or the SIA publishes new statutory guidance. The review checklist is in Part C.
By premises
What it means for your kind of place
A village hall run by hirers and a leisure centre full of swimmers need the same four procedures written very differently. Each guide covers the threshold, the special rules and the parts other premises forget.
By capacity
Martyn’s Law for village halls
Village halls are the classic standard-tier premises: a building that can hold a few hundred people for a fair, a wedding or a polling day, run by volunteers who already have too much to do.
Always standard tier
Martyn’s Law for churches and places of worship
Places of worship have a special position under Martyn’s Law: they are in scope from 200 people but never move into the enhanced tier, however large the congregation.
By capacity
Martyn’s Law for pubs and bars
A pub is in scope as soon as bar, function room, garden and staff add up to 200 people who could be there at the same time. Most town-centre pubs and every pub with a function room should check.
By capacity
Martyn’s Law for community centres
Community centres are usually in scope because several rooms are in use at once. The building manager rarely knows every group in the building, so the procedures have to be simple enough for hirers to follow unprompted.
Always standard tier
Martyn’s Law for schools, colleges and nurseries
Schools already run lockdown drills. Martyn’s Law asks for the four procedures to be written down, for the responsible person to notify the SIA, and for staff to know what to do.
By capacity
Martyn’s Law for gyms and leisure centres
Leisure centres are almost always over 200 once pool, sports hall, gym and spectators are added together. The unusual part is invacuation: half your customers are in swimwear.
By capacity
Martyn’s Law for theatres and music venues
Theatres and music venues sit close to the line between standard and enhanced tier. Below 800 the duties are procedures and awareness; at 800 and above they are much heavier.
By capacity
Martyn’s Law for sports clubs and grounds
Sports clubs are in scope on the strength of their biggest match day. The clubhouse and changing rooms are usually the answer to invacuation and lockdown.
By capacity
Martyn’s Law for hotels and conference venues
Hotels with function space are usually in scope. The overnight procedures, when the building is full of sleeping guests and one member of staff, are the part most operators have not written down.
By capacity
Martyn’s Law for restaurants and cafés
Most independent restaurants are below the 200 threshold. Banqueting suites, food halls and large chain sites are not, and their kitchens are the part of the building the procedures usually forget.
By capacity
Martyn’s Law for shops and retail premises
Retail premises are in scope by size. A supermarket or garden centre is usually standard tier; a shopping centre is often enhanced. The procedures have to work with stock rooms, checkouts and glazed frontages.
Questions
Asked a lot
- № 01
What is Martyn’s Law?
The Terrorism (Protection of Premises) Act 2025, named after Martyn Hett, who was killed in the Manchester Arena attack in 2017. It received Royal Assent on 3 April 2025 and is expected to come into force in spring 2027. It requires premises and events where 200 or more people may be present to prepare for a terrorist attack, with a lighter standard tier from 200 to 799 and a heavier enhanced tier from 800.
- № 02
Do I have to do anything before spring 2027?
Legally, no. Practically, yes: the four procedures need writing, the people on duty need briefing, and the SIA notification service will open around commencement. Premises that prepare now avoid a rush, and the procedures are useful regardless of the law.
- № 03
Who is the responsible person?
The person or organisation with control of the premises for their qualifying use. For a village hall that is usually the management committee or charity trustees; for a pub the operator or tenant; for a school the governing body or trust; for a church the PCC or trustees. Name one day-to-day lead in the document.
- № 04
Does the standard tier require security staff, CCTV or bag searches?
No. The government has said the standard tier is about simple, low-cost procedures and the costs are primarily time. Physical measures are an enhanced-tier concept.
- № 05
Is the generated document enough on its own?
It is a complete first draft in the form an inspector would expect, built from your answers and the published guidance. It is not legal advice. Walk the building with it, correct anything that does not match, brief people and log it. Larger or unusual premises should have it reviewed by someone with counter-terrorism experience.
- № 06
What happens to my answers?
Nothing, unless you ask for reminders. The checker and generator run entirely in your browser; your answers are saved in this browser’s local storage so you can come back, and are never sent to SME Solutions or anyone else. If you sign up for reminders we store your email address, the premises name and the review date, and only until you unsubscribe.
- № 07
Will this be updated when the SIA publishes its statutory guidance?
Yes. The final guidance is expected in autumn 2026. The template carries a version number on its first page so you can see whether you generated it before or after that update.
Sources: ProtectUK, Martyn’s Law and GOV.UK, Understanding Martyn’s Law and the SIA’s role as regulator. The SIA’s final statutory guidance is expected in autumn 2026; this page and the generator will be updated when it lands.