Good practice for crowd management

As new counter terrorism legislation edges closer to implementation, Anne Marie Chebib, chair of the UK Crowd Management Assocaition and MD of Select Security & Stewarding Ltd, outlines what the Terrorism (Protection of Premises) Act 2025 means for public events, and why good practice must lead the way

The Terrorism (Protection of Premises) Act 2025: what it means for events

The Terrorism (Protection of Premises) Act 2025, commonly referred to as Martyn’s Law or the Protect Duty, is new legislation designed to improve public safety by strengthening how venues and events prepare for the threat of terrorism. It introduces a system of duties based on premises type and size, with key thresholds at 200 and 800 capacity (including staff).

In simple terms, the Act places a legal obligation on certain premises and events to assess the risk of a terrorist attack and to demonstrate that proportionate steps have been taken to protect the public. These steps will vary depending on the size and nature of the site. Larger venues will face more detailed requirements. Whether or not a premises falls within scope will often come down to one key factor: entry controls. More on this later.

The legislation was developed by the Home Office following extensive consultation with the public, industry, and security professionals. As the Government factsheet explains:     “The Terrorism (Protection of Premises) Act 2025 is intended to improve protective security and organisational preparedness across the UK. It requires certain premises and events to take steps to prepare for potential terrorist attacks and, where appropriate, reduce their vulnerability to terrorism.”

Although the Act received Royal Assent on 3 April, it has not yet come into force. Its provisions will be introduced gradually, with full implementation expected no earlier than April 2027.

What we know... & what we don’t

There is still a great deal of work to do before the new legislation becomes fully operational. Although the Protect Duty has received Royal Assent, full implementation is unlikely before April 2027. A minimum 24-month implementation period has been introduced to give organisations time to prepare and absorb the forthcoming guidance.

Many of the mechanisms that will support delivery are still in development, including comprehensive guidance, a Competent Persons Scheme, and clarity around what compliance will actually involve.

Until that guidance arrives, local authorities, Safety Advisory Groups, and other decision makers should avoid applying expectations that go beyond the legislation’s current state. Premature enforcement risks confusion and inconsistency.

Sadly, some bad actors are already exploiting the uncertainty. We’ve seen quotes as high as £12,000 offered to community event organisers for so-called “Martyn’s Law compliance.” These claims are not only misleading, they are exploitative. The UKCMA is actively reporting such incidents and will continue to challenge behaviour that undermines trust and distorts the market.

Acting on existing legal duties

What we can do is focus on good practice, which starts with recognising that we already have duties under existing legislation, including the Health and Safety at Work Act 1974 and the Occupiers’ Liability Act 1957. These require us to assess and respond to foreseeable risks, and it is no longer credible to argue that the risk of terrorism is unforeseeable.

We have an ethical and legal responsibility to consider foreseeable risk. This means including counter terrorism measures in risk assessment, and making sure teams are trained and equipped to play their part.

You don’t need to pay to prepare

There are already great free resources available, including SCAN training, ACT training, and WAVE training, alongside a host of useful updates, advisories and guidance from ProtectUK, the National Protective Security Authority (NPSA), and The Home Office. These resources don’t just apply to stewards or security professionals; everyone working in publicly accessible locations (PALs) has a part to play in supporting counter terrorism efforts.

The Safer Crowds, Safer Venues supporting documentation was published in 2024 by the UKCMA, in partnership with LIVE and the Night Time Industries Association. It is available for free download from safercrowdssafervenues.com. This resource was designed to support venues and organisers in thinking practically about crowd safety, particularly in spaces not designed for large gatherings. It remains a vital tool as we reflect on the implications of Martyn’s Law.

Risk assessment is not a tick-box exercise

Risk assessments are the foundation of crowd safety. Understanding your site, mapping ingress and egress, anticipating pinch points, and building well-rehearsed response plans can all be done now. These are not tick box exercises. Done properly, they help identify vulnerabilities and coordinate responses more effectively.

Engaging with credible training providers builds in-house expertise and helps teams make better decisions. Good practice is not about a single checklist. What is proportionate in one setting may look different in another. What matters is that decisions are informed, shared, and rehearsed.

Some companies offer excellent training, but it should never be marketed as “Martyn’s Law compliant.” That kind of language is misleading, erodes public trust, and distorts the market at a time when clarity matters most.

Security that serves the people

Physical security measures, too, should be people-centred and proportionate. That might mean barriers, CCTV, or screening lanes, but it could just as well mean improved lighting, clear signage, or better crowd flow design. What matters is that decisions are rooted in addressing actual risk, not performative theatre. Security is important, but it must also be functional, appropriate, and non-obstructive.

What’s in scope?

It should be noted that in regard to events, the Terrorism (Protection of Premises) Act will not apply to every type of event. Whether or not it does comes down largely to one factor: entry controls. If access to the premises or event space is not actively controlled through ticketing, barriers, or other formal entry processes, then it may fall outside the scope of the Act.

This means many outdoor public gatherings such as parades, processions, and city centre road races may not be captured under the legislation in full. These are the sorts of events I know well. They often span complex routes, unfold across open access spaces, and involve minimal infrastructure. That does not make them any less challenging to secure, quite the opposite.

Similarly, other sectors such as transport, education, and places of worship have been treated separately under the legislation, because they are already subject to distinct regulatory frameworks or have received specific guidance and support.

It is noteworthy that premises may fall into the 200 capacity (standard tier) or the 800 capacity (enhanced tier), but events are only in scope over 800 persons, which includes staff. So, an event of 799 persons will be out of scope.

Let us be clear: just because an event falls outside the formal scope of the Protect Duty, that does not mean there is no risk or no responsibility. In fact, the absence of legal obligation arguably leaves these spaces more vulnerable, as they may be perceived as softer targets. Whether or not an event is formally covered by the Act, our duty to safeguard the public remains. We must not allow legislative thresholds to become the limits of our ambition.

Working with organisers & buyers

I believe we have an opportunity and a responsibility to influence organisers, buyers, contracting authorities and all those responsible for procuring safety and security services. Inter-agency collaboration can be a powerful part of this process. Engaging with police, ambulance, fire, and local authorities in planning stages builds familiarity, trust, and operational clarity. Establishing shared language, protocols, and decision-making structures ensures that when incidents do occur, everyone knows their role and response time is minimised.

The Joint Emergency Services Interoperability Principles (JESIP) offer a strong foundation here. By promoting co-location, communication, coordination, joint understanding of risk, and shared situational awareness, JESIP helps agencies respond more effectively under pressure. These principles are not just for blue lights. Anyone involved in event planning can apply this thinking to improve outcomes across the board.

At a broader level, the Saint-Denis Convention reminds us that crowd safety is about more than physical security. Its emphasis on the three pillars of Safety, Security and Service mirrors the holistic mindset needed in our industry. This means not only protecting people from harm, but also creating environments that are welcoming, respectful, and well managed.

That entails helping organisers understand the distinction between general security and counter terrorism work, managing expectations, and sharing credible advice. The Purple Guide is an excellent starting point, and includes chapters on Counter Terrorism and Crowd Management, both of which have been produced by UKCMA.

Stronger together

The UKCMA is proud to be actively supporting the Home Office in helping to shape the guidance that will support this legislation, which will be regulated by the Security Industry Authority (SIA). We look forward to supporting the SIA when the time is right.

We also believe strongly in the power of shared learning. Hosting webinars and debriefs, attending peer-led forums, and contributing to national knowledge through case studies and discussion help the entire sector advance together. No single organisation has all the answers, but collectively we can raise the bar.

We urge all professionals not to sit on their hands while we wait. There is no one size fits all answer. The strongest protections come from taking ownership of what we can right now.

The final word

Implementing good practice does not just make public spaces safer, it also improves business resilience, strengthens team culture, and fosters trust with audiences and organisers. Safety done well adds value. Failing to act does the opposite.

We all have a part to play in building safer crowds and safer venues, and we do not have to wait. There is plenty we can do to get started today.

UKCMA is working hard to support organisations of all types and sizes in navigating the Protect Duty and raising standards across the industry. From freely available guidance to thought leadership, training advocacy, and strategic collaboration, we are committed to championing safer environments for everyone.

To find out more about the UKCMA or to apply for membership, please visit www.ukcma.com