Martyn's Law and Events: What It Means for Weddings

A private wedding reception or an invite-only corporate function is not a “qualifying event” under Martyn’s Law, because it is not accessible to the public. The venue hosting it, however, can still be in scope as qualifying premises — and when it is, responsibility stays with the venue, not with the couple, the company or the suppliers. As of October 2026 the Home Office has published its statutory guidance and the duties are expected to begin applying from around April 2027.

That distinction matters if you are planning anything for next year, because a lot of event-industry commentary has blurred it. Here is what the legislation and the official guidance actually say.

What Martyn’s Law is, and when it starts

Martyn’s Law is the common name for the Terrorism (Protection of Premises) Act 2025. It creates a duty on certain premises and events in the UK to have procedures in place that reduce the risk of harm from a terrorist attack. The Home Office published its statutory guidance for duty holders on 15 April 2026, explaining the requirements with worked examples and stating that the aim is to let organisations comply without buying in specialist consultancy.

On timing, the Home Office factsheet confirms an implementation period of at least 24 months running from Royal Assent on 3 April 2025. Law firm Pinsent Masons, reporting on the guidance in April 2026, put the expected commencement at around April 2027. As of October 2026 that remains an expectation rather than a date fixed in the Act, so anyone with duties should watch for the commencement regulations.

The regulator is a new function inside the Security Industry Authority (SIA), which will advise duty holders and decide whether they have done enough to comply.

The two tiers, and the numbers behind them

The thresholds are set by how many people may be present at the same time, including staff:

Standard tier: 200 to 799 individuals.
Enhanced tier: 800 or more individuals.

Standard tier premises must put in place four public protection procedures. The statutory guidance names them as evacuation, invacuation, lockdown and communication — in other words, getting people out, bringing people in and holding them safely, securing the site, and telling staff and the public what is happening. The Home Office has been explicit that this tier is not meant to require building work or equipment purchases; its own illustration is a 400-seat restaurant working out evacuation routes, lockdown steps, staff training and a review cycle.

Enhanced tier premises and qualifying events go further, taking additional measures to reduce vulnerability — the examples given include CCTV, bag search policies and vehicle checks where appropriate — and documenting those measures for the regulator.

Why most weddings and private functions fall outside the “event” rules

A “qualifying event” has to clear several hurdles at once. According to the Home Office factsheet, it must expect 800 or more people present at the same time at some point, it must be accessible to the public, it must have access control that checks an entry condition (payment, a ticket, a pass, or membership or guest status of a club or association), it must take place at premises, it must not already be enhanced tier premises, and it must not be excluded under Schedule 2 of the Act.

The public accessibility test is the one that removes most private celebrations. The statutory guidance is unusually direct here: events restricted to invited guests are not publicly accessible and so are not qualifying events, and it gives a wedding reception and an invite-only corporate event as its own examples.

That is not the end of the analysis, though. The guidance goes on to explain that where qualifying premises — a hotel, for instance — host a private event, the premises remain in scope and the venue’s responsible person remains responsible. Control does not transfer to whoever booked the room. So a 150-guest wedding in a hotel ballroom is not itself a regulated event, but the hotel may well be regulated premises with procedures that apply on the night.

Who the “responsible person” is

The guidance defines the responsible person for qualifying premises as the individual, organisation or company with control of those premises for the purpose of their Schedule 1 use. Where premises have more than one use, it is whoever controls the principal use. For a qualifying event, it is whoever controls the premises hosting the event for the purposes of that event.

There are edge cases worth knowing if you hire space rather than use a standing venue. The guidance describes a stately home hired out for a ticketed festival: the venue comes into scope for the duration of the event, and where the hirer takes control of a fenced-off area, the hirer becomes the responsible person for that event. It also notes that a single unforeseen event at a village hall, with attendance below the thresholds, does not drag the hall into scope — but repeated events that do meet the threshold would.

What the framework does not do is create duties for individual suppliers. Caterers, florists, photographers and musicians are not responsible persons by virtue of turning up to perform. In practice, the useful question for anyone booking entertainment is simply whether the venue’s procedures affect the running order: where the band should stand relative to an exit, who makes an announcement if a lockdown is called, and whether a PA system is the quickest way to reach a room of 300 people.

The other licence people confuse this with

Martyn’s Law is a counter-terrorism duty. It is unrelated to music copyright, which trips up a surprising number of event organisers. PPL PRS, the joint venture that issues TheMusicLicence, says a business or organisation playing or performing music will usually need one, and that music played outside a domestic environment is a public performance. Its guidance on political campaign events sets out the general split clearly: where an event takes place in premises already covered for background music, such as a hotel or pub, the venue is responsible; where it takes place somewhere not normally licensed, such as a park or a street, the organiser should approach PPL PRS directly. Tariffs are set separately by PPL and by PRS and depend on factors including venue capacity and whether there is live performance, so a quote has to come from PPL PRS rather than from a published table.

A note on timing for 2027 bookings

Mid-October is when Christmas and New Year function diaries fill and when next summer’s wedding enquiries start arriving in volume. If an event is pencilled in for spring or summer 2027, it is likely to sit on or after the expected commencement of Martyn’s Law. That is a reason to ask a prospective venue two questions early: which tier it expects to fall into, and whether its public protection procedures place any constraints on layout, amplified sound or access during the event.

Frequently asked questions

Do I need to do anything under Martyn’s Law for my own wedding? On the face of the statutory guidance, no. An invited-guest wedding reception is not a qualifying event, and the duties attach to the responsible person for the premises rather than to the person who booked them. Ask your venue what its own procedures are.

What capacity brings a venue into scope? 200 to 799 individuals including staff puts premises in the standard tier; 800 or more puts them in the enhanced tier. For events, the qualifying threshold is 800 or more present at the same time, plus the public accessibility and access control tests.

When exactly does Martyn’s Law take effect? As of October 2026, the Act is expected to apply from around April 2027, following an implementation period of at least 24 months from Royal Assent on 3 April 2025. Check the Home Office guidance for confirmed commencement dates before relying on a specific month.

Who enforces it? A new regulatory function within the Security Industry Authority. It can issue compliance notices, monetary penalties and restriction notices for serious or persistent non-compliance, and the Act also contains criminal offences.