Martyn's Law for hotels in Northern Ireland

Hospitality · October 2026 · Aegis advisory team

Hotels bring together bedrooms, bars, restaurants and function suites, often under one roof and around the clock. That makes Martyn's Law more complex for hotels than for many other premises.

What is Martyn's Law?

Martyn's Law is the Terrorism (Protection of Premises) Act 2025. It applies across the whole of the UK, including Northern Ireland, and is expected to be enforced from spring 2027. The Security Industry Authority (SIA) is the regulator.

Is my hotel in scope, and which tier?

Hotels are a use covered by the Act. What matters is the greatest number of people reasonably expected to be present at the same time, from time to time. For a hotel that includes:

• Residents in bedrooms.
• Diners and drinkers in restaurants and bars, including non-residents.
• Wedding, conference and event guests in function suites.
• Staff on duty, including agency and event staff.
• Spa, gym and leisure users.

Who is responsible?

The responsible person is whoever has control of the premises, usually the operating company. Where the hotel is run under a management agreement or franchise, agree in writing who holds the duty. For enhanced tier hotels run by an organisation, a designated senior individual must also be named.

If third parties hire your function suites, be clear in the contract about who does what during their event.

Standard tier: the four procedures

1. Evacuation

Getting guests out from bedrooms, bars and function rooms, including people who are asleep, unfamiliar with the building or have mobility needs.

2. Invacuation

Bringing people in from terraces, car parks and outdoor event spaces to a safer area inside.

3. Lockdown

Securing entrances, controlling lifts and stairs, and deciding when guests are safer staying in their rooms.

4. Communication

How the alarm is raised, how reception reaches every floor and function room, and what you tell guests by phone, PA or in person.

Enhanced tier: public protection measures

Hotels expecting 800 or more must also put in place measures that reduce vulnerability, so far as reasonably practicable. These cover monitoring the premises and its surroundings, controlling the movement of people, physical safety, and protecting sensitive information such as floor plans and event details. The assessment and plan must be documented.

Practical points for hotels

• Plan for night shifts. Procedures must work with a skeleton team at 3am, not just a full day shift.
• Use your reception team. They control access, know who is in the building and can communicate with every room.
• Brief agency and event staff. They often work the busiest nights with the least familiarity.
• Review before big events. Large weddings, conferences and festive parties change your numbers and layout.
• Link to your fire plan. Build on existing fire and emergency procedures rather than starting from scratch.

Penalties

Standard tier fines can reach £10,000. Enhanced tier fines can reach £18 million or 5% of worldwide revenue. Both carry daily penalties for continued non-compliance.

First steps for hotel managers

1. Work out your realistic peak headcount, including events and staff.
2. Decide your tier and record the reasoning.
3. Confirm the responsible person and, if enhanced, the designated senior individual.
4. Draft the four procedures for day and night operation and brief all staff.
5. Add Martyn's Law terms to function suite hire contracts.

This article is general information, not legal advice. It reflects the Terrorism (Protection of Premises) Act 2025 and the Home Office statutory guidance published in April 2026. Check the current guidance, or speak to us, before relying on it for your own premises. Last updated October 2026.