Martyn's Law: SIA planning tools and what to do before 2027

On 9 November 2026 the Security Industry Authority (SIA) put out the first practical tools for Martyn's Law: a standard tier planning tool and an enhanced tier template. The Terrorism (Protection of Premises) Act 2025 still isn't in force, and no commencement date has been set. Everyone in scope has some drafting to do before that date arrives.

What did the SIA release on 9 November 2026?

Two forms, aimed at different sizes of venue. The standard tier planning tool is for smaller premises and walks through the procedures you have or will need for evacuation, lockdown, invacuation (moving people to safe areas inside the premises) and communication during an attack. The enhanced tier template is for larger or more complex premises and events. It covers assessing vulnerability and the measures that reduce it: monitoring, movement of people, physical security and information security.

The SIA calls them guides, not definitive checklists. It is running pilot inspections at a nightclub, a university and a heritage site, has lined up more than 30 further premises and events, and wants feedback on the tools through its online form by 23 December.

Which tier are you in?

Headcount decides it, and it includes staff. Under the SIA's guidance on the regulator's role, premises where 200 to 799 people may be present at the same time are standard tier; 800 or more is enhanced tier. Schools, further education, childcare and places of worship stay in the standard tier even above 800.

"Reasonably practicable" is a test of cost, time and difficulty set against what can be done, so a 250-capacity bar and a 5,000-seat arena aren't held to the same standard. Some events, such as many traditional Christmas markets, may fall outside the definition because nobody controls entry.

When do you have to notify the SIA?

The Home Office notification guidance, published 14 July 2026, sets the windows. Whoever is responsible for qualifying premises on the day of commencement has three months to notify. After that, a change of responsible person has to be notified within 28 days. For qualifying events the window is 14 days, counted from commencement or from when the event is first publicised if that is later.

Notification goes through an SIA online portal. You can have someone submit for you, but the legal duty stays with the responsible person, which is usually the organisation that controls the premises for the relevant use.

Standard tier organisations won't need to send compliance documents at that point unless the SIA asks.

What happens if you get it wrong?

The SIA's role is to help people comply first, but the penalties are real. The Home Office factsheet gives maximums of £10,000 per penalty plus £500 a day for standard duty premises, and £18m or 5 per cent of worldwide revenue plus £50,000 a day for enhanced duty premises and qualifying events. Daily penalties only apply once a compliance or restriction notice has been ignored. Penalty notices are expected to be the main enforcement tool, and the SIA normally gives at least 72 hours' notice of an inspection.

What does Martyn's Law mean for security and events teams?

Two points. First, the Act itself doesn't require specific training, but the SIA says anyone running the procedures must understand them and their role, so your door supervisors and stewards need to be briefed and able to show it. Free modules are on ProtectUK and NPSA. Second, the SIA pages we read don't set any staff screening requirement under Martyn's Law. Screening for licensed and unlicensed roles still follows its existing routes: the SIA licence check for licensed roles and BS 7858 screening where your contracts or ACS membership call for it. See also our page on event security.

What is still unconfirmed?

The commencement date. The final SIA statutory guidance on its enforcement powers is also pending, and the SIA says practical details of the notification portal will follow. Until those land, the useful work is to confirm your tier with the ProtectUK flowcharts, name the responsible person, fill in the SIA's tool for your tier, and send feedback before 23 December.

This post is general information, not legal advice.