On April 3, 2025, the Terrorism (Protection of Premises) Act 2025, more commonly known as Martyn’s Law, received Royal Assent in the United Kingdom. This legislation, born from the determined advocacy of Figen Murray in memory of her son Martyn Hett, one of the 22 lives lost in the 2017 Manchester Arena bombing, stands as a testament to the need for enhanced public safety and accountability.

Having served as a Counter Terrorism officer who attended and processed the scene of two of the three terrorist attacks in the UK in 2017, I personally understand the critical importance of such measures. Those experiences underscored the chaos, devastation and profound loss that can unfold in moments, driving home the necessity of preparedness and prevention.

This article reflects on Martyn’s Law through the lens of Counter-Uncrewed Aircraft Systems (C-UAS), exploring its role in safeguarding premises and events against drone-related threats, not as a reaction to tragedy, but as a proactive step toward resilience.

The Essence of Martyn’s Law

Martyn’s Law introduces a tiered framework to strengthen security at public venues and events, balancing practicality with protection. It imposes a legal duty on those responsible for certain premises and events to take proportionate steps to prepare for and respond to terrorist threats. This legislation is rooted in five core principles, encouraging a culture of vigilance, preparedness, and accountability across the UK’s public-facing sectors.

Below is a breakdown of the five principles underpinning the legislation:

Assessment of terrorist threats

Organisers and venue operators must understand the nature of current terrorist threats. This means being aware of methods commonly used in past attacks, emerging tactics, and the types of premises or events that might be targeted. It doesn’t require intelligence-level knowledge but does mean staying informed through national threat assessments and advisory services such as NaCTSO.

Each site or event must consider how the general threat landscape translates into specific local vulnerabilities. This involves looking at factors such as crowd size, access points, symbolic significance, or proximity to transport hubs. Risks are not only about the likelihood of an attack but also the potential impact, should one occur.

Once risks are identified, proportionate measures must be put in place to reduce them. These might include enhanced entry checks, crowd management plans, physical barriers, or communication systems. The key is ensuring these measures are practical, visible, and do not unduly hinder the event or venue’s normal operations.

Those involved in running or managing a premises or event—whether full-time staff or volunteers—must receive training appropriate to their role. This includes how to respond in an emergency, how to identify suspicious behaviour or items, and how to activate evacuation or lockdown procedures. Preparedness also includes rehearsals and clear incident response planning.

Martyn’s Law places a clear duty of care on those responsible for premises and events. This means ensuring security isn’t seen as someone else’s job. From community or event organisers to town and parish councils, it requires knowing who is responsible for risk assessments, security arrangements, and post-incident response. Clear lines of accountability help ensure measures are not only designed but implemented and reviewed.

Which sites will be affected?

Unsure if your site is affected by Martyn’s Law? Ask yourself the following:

  • Is your site accessible to the public?

  • Is your site used for a purpose listed in the Bill (e.g. entertainment and leisure, retail, food and drink)?

  • Does your site have a capacity of 100 or more individuals?

  • Does your site have a readily identifiable physical boundary and access by express permission?

This legislation is applicable to any event organiser, including parish and town councils, as Martyn’s Law introduces legal duties based on the capacity of a venue or event.  Organisations responsible for publicly accessible locations, whether permanent premises like community centres or temporary gatherings such as village fetes, festivals, or sporting events, must now consider their legal obligations under the law.

Standard Tier (200+ individuals)

Applies to premises or events where 200 or more people might reasonably be present. Duty holders, those managing these spaces, must develop straightforward preparedness plans, such as evacuation or lockdown procedures, to minimise harm if an attack occurs.

Targets locations or events expecting 800 or more individuals, requiring proactive measures to reduce vulnerability, from physical security (e.g., CCTV) to procedural safeguards.

Covering premises like community halls, stadiums, and event spaces (Schedule 1), while excluding private homes (Schedule 2), the Act allows a 24-month implementation period. During this time, the Home Office will issue guidance, and the Security Industry Authority (SIA) will oversee compliance. Fines for non-compliance reflect the stakes: up to £10,000 for Standard Tier and £18 million or 5% of global turnover for Enhanced Tier breaches.

Through a C-UAS Lens: Drones as an Emerging Risk

Drones, with their accessibility and versatility, have become a growing concern in the terrorism landscape having been utilised by ISIS back in 2014. As an officer on the ground in 2017, I witnessed the immediate human toll of attacks, but today’s threats have now evolved — drones offer hostile actors reconnaissance, disruption, or even weaponised capabilities, all within a cost accessible to most.

Martyn’s Law does not explicitly reference drones, just as it doesn’t specifically mention vehicle-borne attacks, but its emphasis on preparedness and reducing vulnerabilities aligns directly with C-UAS objectives: detecting, tracking, and mitigating hostile uncrewed aircraft systems (UAS). Here’s how the principles apply:

Strengthening Premises

Public premises — whether offices, arenas, or retail centres — could face drone threats like disruption, surveillance or payload drops.

Standard Tier

For a site with 200+ visitors, preparedness might mean adding drone awareness to response plans. Staff could be trained to spot UAS activity and secure vulnerable areas, like rooftops, during an incident — simple steps that echo the Act’s intent without overcomplicating duties.

At an 800+ capacity venue, reducing vulnerability could involve C-UAS tools. Passive systems, such as RF detectors or radar, could alert duty holders to drone presence, while coordination with authorities might enable active countermeasures (e.g., jamming) under strict UK regulations. These measures build resilience without turning security into a burden.

Safeguarding Events

Outdoor events, such as concerts, festivals, or rallies, are exposed to airspace risks. Martyn’s Law offers a structure to address this.

Standard Tier

A 300-person gathering requires a response plan. From a C-UAS angle, this might mean briefing staff to monitor for drones and liaising with police if one appears, practical readiness rooted in vigilance, not alarmism.

A 1,000-person festival demands more. Portable C-UAS handheld detectors for example or drone nets could be deployed within legal bounds, complemented by airspace monitoring with local law enforcement or specialists. Such steps enhance safety while respecting the event’s purpose: bringing people together.

Navigating Practicalities

Integrating C-UAS into Martyn’s Law isn’t without hurdles.

Regulation

UK laws restrict countermeasures like jamming to authorised entities, so duty holders may lean on detection and police partnerships. The SIA’s role could clarify permissible C-UAS options.

Advanced systems carry costs, but scalable solutions, such as mobile apps or basic sensors, align with the Act’s “reasonably practicable” ethos, especially for smaller sites.

Not every drone is a threat. Duty holders must assess local risks, a process the Act supports through forthcoming guidance.

A Moment for Reflection and Action

Having stood amidst the aftermath of 2017’s attacks, I see Martyn’s Law as more than a mandate, it’s a call to learn from the past. The 24-month implementation window is a chance for C-UAS stakeholders to contribute. Engaging with the Home Office to shape guidance could ensure drone risks are addressed thoughtfully, while partnerships with local government and law enforcement or C-UAS providers could make solutions accessible. This isn’t about chasing headlines; it’s about building a legacy of safety that honours those we’ve lost.

The UK’s drone threat is real, there have been a number of incidents that has demonstrated disruption’s scale, and global trends like ISIS’s UAS experiments and the conflict in Ukraine signal intent. Martyn’s Law complements existing frameworks, like the Air Traffic Management and Unmanned Aircraft Act 2021, shifting some responsibility to premises and event operators. It’s a quiet strength: empowering duty holders to act without overwhelming them.

Final thoughts..

The Terrorism (Protection of Premises) Act 2025, enacted on April 3, 2025, embodies a hard-earned lesson from 2017’s tragedies, one which will personally always be with me. From a C-UAS perspective, it offers a vital framework to counter drone threats, weaving preparedness and prevention into the fabric of public spaces. Whether through basic awareness in the Standard Tier or targeted C-UAS strategy in the Enhanced Tier, the Act equips us to face an evolving risk. As we approach its implementation, this is not a rush to react but a deliberate step to protect. Martyn’s Law, in memory of Martyn Hett and others, is a promise: to safeguard our communities, from the ground up and the sky down.