Martyn's Law: What schools need to know.
Published on: 24/9/26, 11:52 AMThe Terrorism (Protection of Premises) Act 2025, known as Martyn's Law, received Royal Assent on 3 April 2025.
The law applies to every school with 200 or more people on site. It follows the 2017 Manchester Arena attack, in which 22 people lost their lives. One of them was Martyn Hett, and the new law carrying his name is now close to coming into force.
Although no exact date has been set for enforcement, the time to prepare is now. Responsibility sits at board level. In a maintained school, it lies with the governing body. In an academy trust, it lies with the trust board rather than individual schools. The responsible person will need to notify the Security Industry Authority (SIA), the regulator, and this can't be delegated.
Most premises are grouped by how many people are expected there at once. From 200 to 799 is the standard tier, and 800 or more is the enhanced tier. Schools are treated differently: early years, primary, secondary and further education settings stay in the standard tier however big they are. The rules don't apply to a school with fewer than 200 people on site, but being prepared is still good practice.
That's good news, because the standard tier is about planning, not expensive building work. You won't be asked to fit CCTV or barriers. You will be asked to have clear, written procedures for four things. Evacuation, Invacuation, Lockdown, Communication.
These four procedures are set out in section 5 of the Act. The Home Office has published guidance on how to meet them.
All four depend on one simple question: who is on site right now? A paper visitor book at reception can't tell you that in an emergency. A digital sign in system can.
Each school will need to notify the Security Industry Authority (SIA), the regulator. The SIA has said it will take a supportive approach first, but standard tier penalties can reach £10,000.
Every organisation will have different risks, layouts and resources, so Martyn’s Law deliberately avoids a one-size-fits-all approach.
What your school should do now
- Find out if you have a qualifying premise. Check your numbers and confirm which of your sites are covered.
- Review your current procedure against the guidance set by the Home Office.
- Ensure robustness of the digital system used to record visitors, contractors and staff arriving and leaving the premise.
- Notify the Security Industry Authority (SIA), through online portal within 3 months of the law coming into force.
If you'd like help reviewing your visitor management and emergency communications, get in touch with iCT4 and we'll help you build a plan.
For more information, visit Sign-In App's School Resource Hub