200–799
Standard duty
Procedures to reduce physical harm in an attack and move people to safety. Procedural, not structural — but they must be real, understood by staff, and recorded.
Terrorism (Protection of Premises) Act 2025
What the Act requires, who carries the duty, and what readiness means in evidential terms — with the section numbers, so every statement can be checked.
01 — Who it applies to
Under section 2, premises qualify where they are wholly or mainly used for one or more of the uses specified in Schedule 1, they are not excluded by Schedule 2, and it is reasonable to expect that — in the Act’s own words — “from time to time 200 or more individuals may be present on the premises at the same time”.
The phrasing is deliberate. The test is not the average occasion, and not the fire-safety capacity figure: it is whether a busy occasion of that size is reasonably foreseeable. Where numbers move with the calendar, the defensible figure comes from the busiest realistic occasion.
200–799
Procedures to reduce physical harm in an attack and move people to safety. Procedural, not structural — but they must be real, understood by staff, and recorded.
800+
The standard duties, with measures to reduce vulnerability, a documented assessment, and a named individual accountable to the regulator. Evidence quality becomes material here.
Schedule 1 provides that certain premises are standard duty “regardless of how they would otherwise be treated”, so the 800 threshold cannot apply to them at any capacity:
Higher education is not capped. Paragraph 16 fixes only who the Responsible Person is — the governing body — so a university venue reaches the enhanced tier on numbers like any other. An assertion that a large place of worship or a secondary school is enhanced duty on headcount cannot be reconciled with Schedule 1.
Schedule 2 removes premises from scope altogether. The provision most often overlooked is paragraph 3: open-air parks, gardens, recreation grounds and non-designated sports grounds are excluded where nothing checks payment, tickets, passes or membership on entry. Controls for a particular event or facility are disregarded where they do not limit access generally — so a park that fences off one ticketed festival a year remains an excluded park for the rest of it. The festival is assessed separately, as an event.
Capacity is a starting point, not a determination. How the figure is calculated, and whether premises qualify at all, turns on the specifics of the site and on Home Office statutory guidance. That assessment rests with the Responsible Person.
02 — Events
Section 3 treats qualifying events on their own terms: the premises are not already enhanced duty premises, the public have access to attend, 800 or more are expected to be present at the same time at some point, and access is controlled — by payment, ticket, pass, or membership of a club or association.
The consequence is that an event can qualify where the premises does not. A field, a car park or a civic square can sit outside the regime all year and still host something squarely within it for a weekend.
03 — Who carries it
The duty rests with the person or body having control of the premises in connection with its relevant use — ordinarily the operator, not the landlord, and not the consultant.
The position is unambiguous: the duty cannot be transferred. An adviser can establish scope, assess arrangements, draft procedures and brief staff. An adviser cannot become the Responsible Person, and no engagement letter can make one. What an adviser can do is render the position defensible: a clear record of what was assessed, what was decided, on what basis, and what staff were actually told.
04 — What it asks for
The standard tier concerns what people do when something happens — four families of procedure:
None of that requires construction work. It requires decisions, recorded, and staff who have been told what they are. The enhanced tier adds measures — steps reducing how vulnerable the premises is in the first place — with a documented assessment and a named accountable individual. That is where monitoring, physical security and security culture come into scope.
05 — When
The substantive Part 1 duties have not been commenced. What is in force is the machinery for producing guidance — not the obligations themselves.
Commencement position
| Provision | In force | Instrument |
|---|---|---|
| s.27 — guidance | 10 April 2026 | SI 2026/320 |
| s.12(2)(a),(b),(3) — SIA guidance and advice | 15 June 2026 | SI 2026/622 |
| s.18(5)–(7) — qualifying worldwide revenue | 15 June 2026 | SI 2026/622 |
| Principal Use of Premises Regulations | 15 October 2026 | SI 2026/1005 |
| Notification requirements | When s.9(1) comes fully into force — not yet commenced | SI 2026/793 |
Sources checked against legislation.gov.uk on 10 September 2026. The Security Industry Authority is the regulator, under sections 12 and 18.
The Principal Use of Premises Regulations 2026 are the most immediately useful. From 15 October 2026, where premises have two or more Schedule 1 uses, the governing use is the one that relates most closely to the purpose and nature of the premises — and the factors to be weighed include whether the premises were built or adapted for that use. For a hotel with a bar, a restaurant and a function suite, that regulation determines which use sets the position.
The implementation period is therefore preparation time, not waiting time. Procedures never written down, briefed or rehearsed do not become evidence on the day the duties commence — and the guidance they will be judged against is being published now.
Check dates before relying on them. Commencement is proceeding in stages and further regulations are expected. This table states the position at the date shown, not a permanent calendar.
Next
An indicative answer in three questions. Nothing stored, nothing sent to us.