GUIDE · TERRORISM (PROTECTION OF PREMISES) ACT 2025
Which tier are you in, and what does it actually mean?
The Act received Royal Assent on 3 April 2025. The Security Industry Authority is the regulator, and duties are expected to commence in spring 2027 after a minimum 24-month implementation period. This page explains the tiers and the deadlines. It is general guidance, not legal advice.
THE TEST IS CAPACITY, NOT TICKETS
Both tiers turn on how many people may reasonably be expected to be present at the same time. That is not your ticket allocation and not your licence capacity: it is the realistic number of people in the place at once, staff included.
STANDARD TIER · 200 TO 799
- Notify the SIA.
- Have public protection procedures in place.
- Be able to show your workings.
ENHANCED TIER · 800+
- Everything in the standard tier.
- Public protection measures, not just procedures.
- A designated senior individual, named.
- A compliance document filed with the SIA.
QUALIFYING EVENTS SIT IN THE ENHANCED TIER
An event qualifies where 800 or more people may reasonably be expected to be present at the same time and the public are there by express permission — ticketed or access-controlled. Free events count. A festival on private land or in a park with controlled entry is the worked example in nearly every published summary.
The trap worth naming: an operator can be a standard-tier premises for its year-round programme and an enhanced-tier duty holder for one festival in a park. The two are assessed separately.
THE FOUR PUBLIC PROTECTION PROCEDURES
Evacuation, invacuation, lockdown and communication. The first three are physical and most operators have a version of them. The fourth is a data question, and it is where the gap usually is: can you reach everyone working on your site, on their phone, in minutes, from a list that is current today and covers contractors as well as your own staff?
NOTIFICATION, AND THE DEADLINE PEOPLE MISS
- Premises: a three-month window from commencement, with changes reported within 28 days.
- Qualifying events: in most cases, notify within 14 days of the event date being made publicly available — which in practice means within 14 days of your on-sale announcement, not 14 days before the event.
- Enhanced tier: the compliance document goes to the SIA as soon as reasonably practicable after first preparation, and again within 30 days of any revision.
THE DESIGNATED SENIOR INDIVIDUAL
A named human, not a job title on a chart, who can be personally prosecuted where non-compliance happens with their consent, connivance or neglect. If your organisation has not decided who that is, that decision is the first piece of work, because everything else is evidence that person will one day be asked for.
Sources: the Terrorism (Protection of Premises) Act 2025 on legislation.gov.uk, and Home Office section 27 guidance published April 2026. The SIA's detailed guidance was still settling when this was written, so confirm against current published guidance before relying on it. General guidance, not legal advice. Last reviewed: 19 August 2026.
The records cannot be backfilled.
A record of who was briefed in May 2026 either exists in May 2026 or it does not. That is the whole argument for starting now, and it is true whether or not you use Bloop. What Bloop keeps as a by-product.