Important — information, not legal advice. This page is a general industry overview, not a legal opinion or compliance assessment. Application depends on the facts, the relevant UK jurisdiction, commencement provisions and current guidance. The client or legally designated responsible person retains its own statutory duties. Always check the legislation and official guidance before acting.
Last reviewed: 2 November 2026 · Selected developments relevant to the private security market · Links to official sources are provided throughout.
Enacted — commencement pendingTerrorism (Protection of Premises) Act 2025
Commonly known as Martyn's Law · Royal Assent: 3 April 2025
The Act creates a tiered framework for certain qualifying premises and events to improve preparedness for, and protection from, terrorism. The statutory guidance describes a standard tier for qualifying premises where 200 or more individuals may be present at the same time, and an enhanced tier generally associated with 800 or more. The Act includes specific rules and exceptions, so these numbers should not be treated as a simple test for every venue.
Status as at 2 November 2026: the Act has been passed, but the implementation period is at least 24 months from Royal Assent. The Home Office guidance states there is no legal requirement to comply until commencement. That means the Act is not yet in force on this review date; organisations in scope should use the advance guidance to prepare.
Why it matters: qualifying premises and event organisers will need to understand their scope, responsibilities and proportionate preparedness arrangements. A contracted security provider may undertake tasks, but the responsible person cannot transfer the legal responsibility itself to the provider.
PearSecure relevance: we can help clients frame questions about operational support and provider capabilities. We do not certify Martyn's Law compliance, provide legal advice or take over a premises controller's legal responsibilities.
Home Office Act and guidance collection · Statutory guidance
Guidance updated in 2026SIA licensing guidance — January 2026 revisions
The Security Industry Authority updated its guidance on licensable activities on 15 and 29 January 2026. The changes provide more detailed explanations of manned guarding, premises and property, when CCTV activities require a public space surveillance licence, and certain exemptions.
Why it matters: whether a person needs an SIA licence depends on the work they actually do and the circumstances — not simply their job title. Manned guarding, door supervision, keyholding and specified CCTV activity can be licensable. A provider should check that its personnel hold the appropriate licences for the activity assigned.
PearSecure relevance: licence scope should be part of any provider and service due diligence. PearSecure does not issue SIA licences or make licensing determinations.
SIA: Find out if you need a licence · Apply for an SIA licence
In force — 30 October 2026Employment Rights Act 2025 — stronger harassment prevention duties
The Worker Protection (Amendment of Equality Act 2010) Act 2023 introduced an employer duty to take reasonable steps to prevent sexual harassment of employees from 26 October 2024. The Employment Rights Act 2025 strengthened that duty to require all reasonable steps from 30 October 2026 and introduced an obligation on employers not to permit sexual harassment of employees by third parties.
Why it matters: this is relevant to security businesses as employers and to workplaces where employees interact with members of the public, customers, contractors or venue visitors. Policies, training, reporting routes, supervision and incident handling should be reviewed against the current legal requirements.
Worker Protection Act 2023 · Government implementation timeline (updated 22 October 2026)
Royal Assent — 19 June 2025Data (Use and Access) Act 2025
The Act makes changes to the UK's data protection and privacy framework. It does not replace the UK GDPR, the Data Protection Act 2018 or the Privacy and Electronic Communications Regulations; it amends aspects of the existing regime. Changes include a new recognised-legitimate-interests route for specified purposes and requirements for organisations to handle data protection complaints.
Why it matters: security operations may involve personal data through CCTV, access records, incident reports, visitor records and staff information. Organisations should have a lawful basis, transparent notices, proportionate retention, access controls and a process for handling data rights and complaints.
Government summary of data protection changes · ICO: Data (Use and Access) Act 2025
In force — 24 February 2025Procurement Act 2023
The new public procurement regime came into force on 24 February 2025. It changes how many public contracts are advertised, tendered, awarded and managed. The new Central Digital Platform supports supplier registration and publication of procurement information, while the Act aims to improve transparency and access for suppliers, including SMEs.
Why it matters: security providers seeking public-sector work need to understand the new notice, platform, exclusion, transparency and tendering requirements relevant to each opportunity. The Act does not remove the need to meet a contracting authority's specific security, technical or assurance requirements.
Government supplier guidance · Procurement Policy Notes
Foundational framework
The Private Security Industry Act 2001 remains the central statutory basis for SIA regulation of specified private security activities. The SIA licenses individuals undertaking licensable activities and operates the Approved Contractor Scheme. UK GDPR and the Data Protection Act 2018 remain central to personal-data handling, as amended by the Data (Use and Access) Act 2025.
Private Security Industry Act 2001 · About the SIA · ICO UK GDPR guidance
What this means for a client: ask who will actually deliver the service, which licences and approvals apply, who employs the officers, what insurance is held, how incidents are escalated, how personal data is handled and who retains each legal responsibility.
This page is intended as a dated overview. Legislation, commencement regulations and official guidance may change. Review the linked official sources for the current position before making a business or compliance decision.
Discuss a security requirement