Martyn's Law and Schools

Clear guidance on Martyn’s Law compliance for schools, with practical steps for leaders, governors and responsible persons.

Martyn’s Law - formally the Terrorism (Protection of Premises) Act 2025 - was passed following the Manchester Arena Inquiry into the 2017 attack. It is named in memory of Martyn Hett, one of the 22 people killed.

The Inquiry showed that venues and organisations were not sufficiently prepared for terrorist threats. Martyn’s Law closes that gap by making it a legal duty for schools and other premises to plan for emergencies.
The aim is simple: if the worst happens, staff know what to do, plans are in place, and lives are protected.
Status and timing
Martyn’s Law received Royal Assent on 3 April 2025. The Government has confirmed there will be at least a 24-month preparation period before full commencement.
That means legal enforcement is unlikely before 2027. But the threat to schools is real today, as recent foiled plots and incidents at education settings in the UK and overseas show.
Waiting until 2027 to prepare would leave pupils, staff and communities exposed. Schools should begin complying now, both to meet forthcoming statutory duties and to provide immediate reassurance to governors, staff and parents.
What it requires of schools
Martyn’s Law applies to schools where 200 or more people may reasonably be present at one time. This threshold means most primary, secondary and further education settings are in scope.
Standard Duty (200–799 people):
Schools must:
  • Notify the Security Industry Authority (SIA) as the regulator
  • Appoint a responsible person (usually a headteacher or senior leader, supported by governors or trustees)
  • Create and maintain procedures for invacuation, lockdown, evacuation and communication
  • Make sure all staff are aware of these procedures and rehearse them
Enhanced Duty (800+ people):
Schools remain in Standard Duty even if they exceed 800. Enhanced duties only apply to higher education and large public events. What about smaller schools?
Some nurseries, small primaries and SEND/AP settings may fall below 200 people and be outside Martyn’s Law.
But DfE guidance (2025) makes clear that all schools are expected to have proportionate emergency procedures, staff training, and inclusive planning for SEND and younger learners. So even if not legally covered, inspectors and governors will still expect evidence of preparedness.
Drills and current practice
Sector surveys such as Teacher Tapp suggest practice is increasing:
  • 59% of secondary schools and 47% of primaries ran drills with pupils in 2024, up from 2022.
  • Around a quarter still limit drills to staff-only.
  • 26% of primaries and 19% of secondaries reported having no drill in place.
These are not compliance figures - but they show the scale of improvement still required.
Under Martyn’s Law, failing to test procedures or keep records would be a compliance gap.
Hiring out school premises
Martyn’s Law also applies when schools hire out facilities for public use:
  • 200+ attendees: Standard Duty applies
  • 800+ attendees: Enhanced Duty may apply
Responsibilities sit with the organisation in control of the premises at the time - often the school, but sometimes shared with the event organiser. Letting agreements should make this clear.
Regulator and enforcement
The Security Industry Authority (SIA) is the regulator. It will:
  • Publish statutory guidance
  • Maintain a register of responsible persons
  • Inspect and require evidence of compliance
  • Apply sanctions where necessary
Penalties:
  • Up to £10,000 for breaches of Standard Duty
  • Up to £18 million or 5% of global turnover for Enhanced Duty venues.
Compliance checklist for schools
To meet Martyn’s Law and DfE expectations, schools must be able to demonstrate the following steps have been taken and that they are continually reviewed - this is not a one-off exercise. Plans and training must be kept live, regularly tested and updated.

A responsible person has been appointed and supported by governors.

Written procedures exist for lockdown, invacuaton, evacuation and communication.

Staff are trained and aware of their responsibilities.

Regular drills are carried out and reviewed.

Records and evidence are kept up to date and ready for inspection.

Lettings agreements demonstrate compliance when the site is used for public events.

How CTprepare helps?

Security compliance is complex and governors, staff and parents will expect evidence.
CTprepare guides schools step by step through tailored questionnaires and embedded training to create customised compliance documents. It also:
Produces emergency procedures from inituitive, simple to answer online questionnaires.
Asks the right questions to help create practical security plans.
Records drills and training evidence.
Provides governors & inspectors with audit-ready logs.
With CTprepare, schools can be confident that their emergency planning meets both the letter and spirit of Martyn’s Law, while reassuring staff, governors and parents that the school is prepared - not in 2027, but now.
© 2025 CTprepare Limited. All rights reserved.
CTPREPARE LIMITED, a company incorporated in England and Wales with registered number 16574805. Registered address: 128 City Road, London, England, EC1V 2NX