How long does Martyn's Law compliance actually take?
Last reviewed:
For most standard-tier venues, the genuine work is manageable, spread across about a week, because what the law requires is procedures and staff awareness, not paperwork, equipment or accreditation (paras 7.32, 6.7). A word on register before we go further: the Act prescribes no timescale at all, so everything below about duration is our estimate of what the work involves, not a figure from the guidance.
Why it's days, not months
Strip away what isn't required and the actual duty is compact: work out your capacity, know who your responsible person is, put four types of procedure in place, and make sure people with a role know theirs. See the standard tier explained for the full list. None of it needs a purchase: "it is not mandatory to use third-party products or services to comply with the Act's requirements" (para 6.7), and there's no consultant lead time sitting on the critical path. See do you need a consultant. There's no accredited training course to book either, and no risk assessment or physical security kit to source, so none of the usual reasons compliance projects drag on actually apply here.
Where the time really goes
Thinking through the four procedures against your actual building is not instant, because you need to understand what each one has to contain before you can write something that would hold up: evacuation, invacuation, lockdown and communication, worked out for your layout rather than copied from a template. The part you genuinely cannot compress is making sure everyone with a role knows it (para 7.51). That depends on rotas, volunteers and hirers, not on how quickly you personally can write. It's also why last-minute is possible but unpleasant. See the 72-hour version of this plan if that's where you are.
A realistic week, day by day
- Day 1: checker and responsible person. Confirm your tier with the free checker and establish who your responsible person is.
- Day 2: walk the building, draft procedures. Work through evacuation, invacuation, lockdown and communication for your actual premises.
- Days 3–5: brief staff and volunteers across shifts. This is the elastic part: fit it around whoever's actually working, not an idealised single meeting.
- Evidence assembly. Pull your capacity method, procedures and awareness record into one place. This is assembly more than fresh work, but give it enough time to do properly; see what to show an SIA inspector for the itemised version.
- Set a review reminder. Not a legal requirement. The guidance's own recommendation, "should", not "must" (para 7.29).
What makes it take longer
- Hirers and one-off events. A hired-out hall or a one-off booking can shift who's responsible for that event. See Martyn's Law for village halls.
- Mixed-use premises. More than one use under one roof adds a step to work out. See the principal-use test explained.
- Recurring big events. A busy day that recurs, even just once a year, can pull a quieter venue into scope for the whole year. See the "from time to time" rule.
- Multi-site operators. Each premises is assessed separately, so the work broadly multiplies rather than sharing a single answer across sites.
Can it be done in a day?
Yes, the documents can, though only if your team already knows their roles. Otherwise what you've built by the end of the day is a binder, not working procedures. That distinction is worth holding onto. It cuts both against the fear-merchants who make this sound like months of work, and against anyone promising you'll be "compliant in ten minutes". Drafting the capacity assessment and the four procedures can move quickly once you understand what each one needs to contain, but nobody can single-handedly make a whole rota "aware" of anything in the same sitting, and that's fine. It's simply the part that happens over the following days rather than the first one.
This is roughly where the Martyn's Law Plan service earns its keep. It can significantly speed up the document-and-evidence half of the week above, and gives you the briefing materials for the human half, which, honestly, is the half that actually matters.
Start with the two-minute step that makes the rest of the week concrete: check your tier for free.
Common questions
Is there a legal deadline for compliance?
No fixed timescale is set in the Act itself. Duties are expected to commence in spring 2027, after which the requirements apply from commencement rather than counting down from any earlier date. Notification timing depends on the SIA's portal. See the current notification status.
Do I need to book a consultant to move faster?
No. The guidance is explicit that using a third-party product or service is never mandatory (para 6.7), and a consultant's lead time isn't on the critical path for most standard-tier venues. See when a consultant genuinely helps.
I have an inspection this week. Is it too late?
No. See your 72-hour plan for exactly what to prioritise.
Does a bigger venue take longer?
Venues expecting 800 or more are a different regime with genuinely more to do: public protection measures as well as procedures, and a compliance document. See the enhanced tier explained.
About this guide. Written by the Martyn's Law Plan team, based on the statutory guidance published under the Terrorism (Protection of Premises) Act 2025. Last reviewed: . Read the official guidance on GOV.UK.
Sources: Terrorism (Protection of Premises) Act 2025; Home Office statutory guidance (April 2026, updated May 2026) and supplementary documents. Paragraph references are to the statutory guidance. General information, not legal advice. Contains public sector information licensed under the Open Government Licence v3.0.