Martyn's Law penalties: what non-compliance actually costs
Last reviewed:
At the standard tier, the maximum civil penalty is £10,000, plus up to £500 a day for continuing non-compliance with a notice. The £18 million figure often quoted in headlines applies only to enhanced-tier premises and qualifying events. Here's the full enforcement ladder, with the numbers the guidance actually sets out.
The civil penalties, by tier
| Standard tier | Enhanced tier / qualifying events | |
|---|---|---|
| Maximum penalty | £10,000 (para 9.14) | £18 million, or 5% of worldwide revenue, whichever is higher (para 9.15) |
| Daily penalty for continuing non-compliance | £500 a day (para 9.16) | £50,000 a day (para 9.16) |
| Failing to attend a required interview | £5,000, regardless of tier (para 9.14) | |
That £18 million figure you may have seen quoted at small venues is simply wrong. It has never applied, and will never apply, to a standard-tier pub, village hall, church or gym expecting 200 to 799 people. It exists for enhanced-tier premises expecting 800 or more, and for large qualifying events.
The enforcement ladder
The Act gives the SIA a set of escalating civil tools; exactly how it will use them day to day will be set out in the SIA's own operating guidance, due before commencement:
- An information notice, if the SIA needs details about your premises or event, or needs someone to attend an interview (para 9.8).
- A compliance notice, if the SIA has reasonable grounds to believe a requirement isn't being met, setting out what to do and by when (para 9.10).
- For enhanced-tier premises or qualifying events only, a restriction notice, if procedures or measures aren't in place and restrictions are necessary to reduce risk (para 9.11).
- A financial penalty, calculated using the figures above (paras 9.12–9.16).
One honest nuance: a penalty doesn't legally have to be preceded by a notice. The SIA can issue one directly if it is satisfied, on the balance of probabilities, that a requirement isn't being met (para 9.12). In practice the notices are the tools the Act gives the SIA to put things right first, and daily penalties only apply to continuing non-compliance with a compliance or restriction notice (para 9.16), but a warning first is the expected route rather than a guarantee.
What's actually a criminal offence
Ordinary non-compliance with a compliance notice at the standard tier is not a criminal offence; the guidance says so in those exact words (figure 16). Criminal offences under the Act attach to specific conduct instead, and mostly apply to anyone, not just the responsible person, regardless of tier:
- Failing to comply with a compliance notice at the enhanced tier, or with a restriction notice at any tier: an unlimited fine and, in the most serious cases taken to the Crown Court, up to two years' imprisonment. It's a defence to show you took all reasonable steps to comply.
- Knowingly or recklessly giving the SIA false or misleading information: the same maximum as above, and applies to anyone, not only the responsible person.
- Failing to comply with an information notice: a fine (summary only), and again applies to anyone given the notice.
- Intentionally obstructing an inspector: a fine and, potentially, a short prison term (summary only).
- Pretending to be an inspector: a fine (summary only).
The maximum penalties above are as they apply in England and Wales; in Scotland and Northern Ireland the fine caps and summary prison terms differ slightly, though the two-year Crown Court maximum is the same across the UK.
Senior managers aren't automatically liable for their organisation's penalties, but where a criminal offence is proven and it happened with a senior person's consent or connivance (or, for the notice offences, their neglect), that individual can be prosecuted alongside the organisation (paras 9.19–9.20).
The regulator only refers cases for prosecution "in the most serious cases…where it is proportionate and in the public interest" (para 9.17); it isn't the default response to a standard-tier venue getting something wrong.
When any of this can apply
None of it can bite yet. These penalties only take effect once the Act's duties commence, expected in spring 2027; see the current timeline for where things stand. Getting your tier, procedures and briefing sorted now simply means there's nothing to worry about once they do.
Start with the free tier checker to confirm your tier, or read the standard tier explained for what's actually required.
Common questions
Can I go to prison for not complying with Martyn's Law?
Not for ordinary non-compliance at the standard tier; that's a civil matter, enforced with notices and financial penalties, and the guidance states plainly that it "is not a criminal offence" (figure 16). A small number of specific acts are criminal for anyone, at either tier, mainly giving the regulator false information, obstructing an inspector, or impersonating one.
Will I be fined without warning?
It's unlikely, but the Act doesn't guarantee a warning. Compliance notices exist precisely to set out what to put right and by when, and daily penalties only ever attach to ignoring a notice. Strictly, though, the SIA can issue a financial penalty directly if it is satisfied a requirement isn't being met (para 9.12); a notice first is the expected route, not a legal right.
Who enforces Martyn's Law?
The Security Industry Authority (SIA). It can request information, carry out inspections, issue compliance and restriction notices, and impose financial penalties. Criminal cases are referred to prosecutors only in the most serious circumstances.
About this guide. Written by the Martyn's Law Plan team, based on the statutory guidance published under the Terrorism (Protection of Premises) Act 2025. Last reviewed: . Read the official guidance on GOV.UK.
Sources: Terrorism (Protection of Premises) Act 2025; Home Office statutory guidance (April 2026, updated May 2026) and supplementary documents. Paragraph references are to the statutory guidance. General information, not legal advice. Contains public sector information licensed under the Open Government Licence v3.0.