Skip to content

Healthcare

Martyn’s Law for hospitals, surgeries and clinics.

Martyn’s Law can apply to hospitals, GP surgeries and clinics providing physical or mental healthcare where the qualifying premises tests are met. Healthcare has no general standard-tier exception: qualifying premises with 200–799 people expected together are standard tier, and those with 800 or more are enhanced. For NHS hospitals, the responsible person is the operating trust or board. The aim of the law is that staff could help patients, visitors and colleagues to safety if there were ever an attack, including people who need help to move.

Last updated · Official sources listed below

Site briefHealthcare
Likely tier
Depends on the premises and expected simultaneous numbers
NHS hospitals
The operating trust or board is the responsible person
Count
Patients, visitors, staff, contractors and volunteers
When
Expected in spring 2027; no fixed commencement date

01

Check the healthcare premises

Hospitals and the provision of physical or mental healthcare are listed uses. A premises must include a building, be wholly or mainly used for a listed use, meet the attendance threshold and have no applicable exclusion.

A small surgery with fewer than 200 people reasonably expected together is outside the premises threshold. A hospital site can be much larger, but its tier still depends on an evidenced simultaneous count rather than its name or service type.

Start with a map showing the buildings and associated land. Where buildings form one group of premises, add their numbers together. Identify separately controlled facilities within the site for further consideration.

Check your tier

02

Count people present during expected busy periods

Consider patients, visitors and staff present together in the qualifying use area. Include employees, contractors and volunteers. Appointment totals or annual patient numbers do not show the greatest number expected at one time.

Look at overlapping clinics, visiting periods and shift changes when choosing your method. For a hospital, bed numbers are only part of the picture. For a surgery, review waiting rooms, consultation activity and staff rather than counting booked appointments alone.

Use reasonable evidence such as historic attendance, relevant occupancy limits or another justified method. Add staff where the starting data excludes them, and record the assumptions behind your figure. Predictable peaks count; unforeseen one-off spikes do not.

How to count people

03

Identify the responsible organisation

For NHS hospitals, the Act fixes responsibility with the operating trust or board. It does not automatically sit with an individual ward manager, receptionist or security lead.

For other healthcare premises, identify whoever controls the premises in connection with its qualifying use. Responsibility is defined by law and cannot be delegated to a consultant, although tasks can be supported by others.

Separate qualifying premises within a larger site may have their own responsible people and co-ordination duties. Where the same responsible person controls nested qualifying premises, they are treated as one. Map shared doors, routes and communication arrangements with other operators.

Understand the responsible person

04

Choose procedures suited to patients and care

After commencement, standard premises will need SIA notification and appropriate procedures, so far as reasonably practicable, for evacuation, moving people to a safer place inside, preventing entry or exit, and communication when terrorism is suspected.

Consider patients who cannot move independently, people receiving treatment and visitors unfamiliar with the site. Discuss who gives instructions, how teams communicate between areas and which spaces or entrances your organisation controls.

The duty is proportionate, considering benefit, cost, time and difficulty; no one has to put themselves at risk. Standard tier requires no formal risk assessment or written plan. Documenting procedures is recommended, and staff with roles must know what to do.

The four public protection procedures

05

Prepare the additional duties for larger sites

Enhanced premises will need assessed and reviewed measures covering monitoring, movement of people, physical safety and security, and information security, so far as reasonably practicable. They also need a required document describing procedures, measures and how these reduce risk.

Where the responsible person is an organisation, it must designate a senior individual in management or control. Review measures when use, occupancy or layout changes, and consider how shared clinical and public areas affect practical arrangements.

Wardcote offers hands-on enhanced tier support from an experienced team it works with for enhanced venues. Buying specialist services or software is not a legal requirement.

Enhanced tier dutiesEnhanced tier support

06

Start with your site and existing teams

The core duties are not yet enforceable. Commencement is expected in spring 2027, with no fixed date set. Begin by confirming the responsible organisation, defining the premises and gathering peak occupancy evidence.

For standard-tier premises, Wardcote’s subscription helps write the four procedures, brief staff and volunteers, keep records and prepare the SIA notification. The free tier check is a useful starting point before choosing support.

Check your tierWardcote’s standard-tier software

FAQ

Common questions

Does Martyn’s Law apply to GP surgeries?

It can, because healthcare is a listed use. A surgery must meet all the premises tests, including at least 200 people reasonably expected together.

Who is responsible for an NHS hospital?

The Act identifies the operating NHS trust or board as the responsible person. This is not automatically an individual hospital manager.

Are all hospitals standard tier?

No. Healthcare has no general standard-tier exception, so qualifying premises expecting 800 or more people together are enhanced tier.

Do patients, visitors and volunteers count?

Yes. Include people present in the qualifying use area, including staff, contractors and volunteers, when assessing simultaneous numbers.

Does a standard-tier clinic need a written plan?

The Act does not require a written plan or formal risk assessment at standard tier. Documenting appropriate procedures is recommended.

Official sources

This page explains the law. It is not legal advice. Check the official guidance for your circumstances.