Answer-first: Once Martyn’s Law (the Terrorism (Protection of Premises) Act 2025) is in force, the “responsible person” for a qualifying premises or event must formally notify the regulator — the Security Industry Authority (SIA) — that they are in scope. For qualifying premises there is a 3-month window from commencement to notify, with changes reported within 28 days; for qualifying events the responsible person must, in most cases, notify the SIA within 14 days of the event date being made public. Someone else may submit on their behalf — but legal responsibility always stays with the responsible person.

The regulator for Martyn’s Law is the Security Industry Authority (SIA). In an August 2026 update, the SIA’s Executive Director for Martyn’s Law, Laura Gibb, set out how notification will work, alongside newly published Home Office guidance. The law is expected to come into force in 2027 — but with the UK national threat level at SEVERE and festival season in full swing, the SIA is encouraging everyone in scope to start preparing now.

Who is the “responsible person”?

• Qualifying premises: the individual, organisation or company with control of the premises for the use that makes it subject to Martyn’s Law.
• Qualifying events: the individual, organisation or company with control of the premises at which the event takes place.

As Home Office guidance explains, you have “control of the premises” if you typically have both: (a) possession of the premises at the time — you are the occupant; and (b) the right and ability to make decisions about their management and use, particularly on who may or may not remain on site. ProtectUK publishes a responsible-person flowchart to help you work out where you stand.

The notification timelines

• Qualifying premises: a 3-month window from commencement of the relevant section of the Act to submit a notification, with any changes reported within 28 days after that.
• Qualifying events: in most cases, notify the SIA within 14 days of the event date being made publicly available.

A responsible person may authorise someone else to submit the notification on their behalf, but legal responsibility for compliance always remains with the responsible person. The SIA is building a secure notification portal and will publish details on how to use it nearer the time. (See the Home Office notification-requirement guidance.)

Notification is the paperwork — the procedures are the point

The SIA is clear that Martyn’s Law is “not about stopping events — it is about making them safer”. Notifying the SIA tells the regulator you are in scope; it does not, by itself, make an event safer. The substance is having appropriate, reasonably practicable public protection procedures — evacuation, invacuation, lockdown and communication — that would actually work under pressure. Where strong protective security measures are already in place, those are a solid starting point.

Where communication fits

Of those four procedures, communication is the one that decides whether the others work: can you reach the whole crowd, clearly, in a single action?

We help with the communication element specifically. CrowdCows provides broadcast-based crowd communication that reaches every screen on site over its own signal — independent of the mobile network — so your communication procedure keeps working precisely when it is needed most. Your full set of procedures and your risk assessment stay with you and your safety advisers. (European patent application pending.)

Frequently asked questions

Do I need to notify the SIA under Martyn’s Law?

Yes. Once the law is in force, the responsible person for a qualifying premises or event must formally notify the SIA that they are in scope.

How long do I have to notify for a premises?

There is a 3-month window from commencement of the relevant section of the Act, with any changes reported within 28 days after that.

How long do I have to notify for an event?

In most cases, within 14 days of the event date being made publicly available.

Who is the “responsible person”?

For premises, the individual, organisation or company with control of the premises for the use that brings it into scope. For events, the one with control of the premises at which the event takes place. “Control” means both occupying the premises and having the right to decide on their management and use.

Can someone notify on my behalf?

Yes — you can authorise someone to submit the notification, but legal responsibility for compliance always remains with the responsible person.

See how real-time crowd communication works in practice → Smart crowd communication at Silverstone F1. Or talk to us about your venue or event.

Sources

• SIA / GOV.UK, Martyn’s Law: keeping up the momentum (5 August 2026)
• GOV.UK, Understanding Martyn’s Law and the SIA’s role as regulator
• Home Office, Terrorism (Protection of Premises) Act 2025: notification requirement
• ProtectUK, Responsible Person flowchart (PDF)
• ProtectUK, Martyn’s Law frequently asked questions