KEY POINTS
- Standard tier applies to qualifying premises where 200 to 799 people are reasonably expected at the same time. Enhanced tier applies at 800 or more. Qualifying events follow the enhanced tier rules.
- Both tiers must notify the SIA and have appropriate public protection procedures (evacuation, invacuation, lockdown, communication) so far as reasonably practicable.
- Enhanced tier adds public protection measures, a compliance document sent to the SIA, and a designated senior individual where the responsible person is an organisation.
- Maximum penalties are £10,000 at standard tier and £18 million or 5% of qualifying worldwide revenue (whichever is higher) at enhanced tier.
- Places of worship, childcare, schools and further education stay in the standard tier even at 800 or more.
The difference in one minute
The Terrorism (Protection of Premises) Act 2025 calls them "standard duty premises" and "enhanced duty premises". The Home Office guidance uses "standard tier" and "enhanced tier". The dividing line is the number of people, including staff, that it is reasonable to expect on the premises at the same time, from time to time: 200 to 799 for standard, 800 or more for enhanced.
Standard tier is about being prepared: knowing what your staff would do in the first minutes of an attack. Enhanced tier adds being protected: actively reducing the vulnerability of the premises, and showing the regulator in writing how you have done it. If you do not yet know your number, start with how to calculate capacity or our tier checker.
Side-by-side comparison
| Standard tier | Enhanced tier and qualifying events | |
|---|---|---|
| Threshold | 200 to 799 people reasonably expected at the same time, from time to time | 800 or more (events: 800 or more at some point during the event) |
| Typical examples (depends on numbers) | Busy pubs, restaurants, shops, gyms, village and community halls, smaller hotels, all qualifying places of worship and schools | Large nightclubs, theatres, arenas, stadia, shopping centres, large hotels, hospitals, universities, ticketed festivals |
| Notify the SIA (section 9) | Yes | Yes, with additional details including the senior individual |
| Public protection procedures (section 5) | Yes, so far as reasonably practicable | Yes, so far as reasonably practicable, with extra considerations for larger sites |
| Public protection measures (section 6) | No | Yes: monitoring, movement, physical safety and security, security of information |
| Physical works or equipment required? | No statutory requirement, though small changes may sometimes be reasonably practicable | Must be considered as part of measures, so far as reasonably practicable |
| Written document (section 7) | Not a legal requirement, but strongly recommended | Required: statement and assessment of procedures and measures, sent to the SIA and kept up to date |
| Senior individual (section 10) | Not required | Required where the responsible person is not an individual |
| Co-ordinate with other responsible persons (section 8) | Yes, where relevant | Yes, and others with partial control must co-operate with you |
| Restriction notices | Cannot be issued | Can be issued, for up to six months (extendable) |
| Maximum penalty | £10,000 | £18 million or 5% of qualifying worldwide revenue, whichever is higher |
| Maximum daily penalty | £500 | £50,000 |
| Ignoring a compliance notice | Civil penalty only | Criminal offence, up to two years' imprisonment on indictment |
What both tiers must do
Every responsible person, whatever the tier, has three core duties.
- Notify the SIA when you become, or stop being, responsible for qualifying premises, and keep the details accurate. Existing premises will have three months from commencement. See notifying the SIA.
- Have appropriate public protection procedures in place, so far as reasonably practicable, for evacuation, invacuation, lockdown and communication, covering the premises and how an attack in the immediate vicinity would affect you.
- Co-ordinate with other responsible persons where the premises have more than one, or where your premises sit inside other qualifying premises.
Procedures must be workable in practice. The guidance says a written procedure is not enough if staff do not know their roles or lack the tools to carry it out, so briefing, instruction and some testing are part of meeting the duty at both tiers. It also expects all staff to be alert to suspicious items and behaviour and to know how to report concerns. Our guide to public protection procedures explains how to build these.
What enhanced tier adds
Enhanced tier premises and qualifying events must assess and keep under review the public protection measures that are appropriate, and put them in place so far as reasonably practicable. The aim is twofold: reduce the vulnerability of the premises or event to an attack, and reduce the risk of harm if one happens. The Act groups measures into four areas:
- Monitoring the premises and the immediate vicinity, for example CCTV, patrols and staff vigilance, so suspicious activity is spotted early.
- The movement of people into, out of and within the premises, for example screening and searches, restricted access areas and policies to stop crowds building up.
- Physical safety and security, for example stand-off zones, vehicle security barriers and protective glazing.
- Security of information, so that plans, rotas and security details are not available to someone planning an attack.
The responsible person must then prepare a compliance document containing a statement of the procedures and measures, and an assessment of how they are expected to reduce risk and vulnerability. Measures that are planned but not yet in place, for example pending a refurbishment, must be included, and the guidance says you should explain the reasons and the interim mitigations. The document goes to the SIA as soon as reasonably practicable after it is first prepared and within 30 days of any revision. The SIA has said it will share templates before the law starts.
Organisations must also designate a senior individual, someone concerned in the management or control of the organisation, to be responsible for ensuring compliance. Read more in enhanced tier duties and public protection measures, or see our introduction to specialist support for 800+ venues.
Special cases and moving between tiers
- Places of worship, registered childcare, schools and further education premises are always standard tier if they qualify, even with 800 or more people. Events held at them cannot be qualifying events.
- Higher education premises, such as universities, are treated like any other premises and can be enhanced tier.
- A one-off event of 800 or more at standard tier premises does not make the premises enhanced tier. It may instead be a qualifying event with its own responsible person and enhanced duties for its duration.
- Events of 800 or more that recur, even once a year, can make the premises enhanced tier, because the threshold is then met "from time to time".
- Events held at enhanced tier premises are never separate qualifying events. The premises' responsible person must cover them.
- Tier is not permanent. A change in trading pattern, layout or events programme can move premises up, down or out of scope, so review your assessment when things change.
Large standard tier premises such as cathedrals or big secondary schools are not legally required to adopt enhanced measures. But the guidance suggests they may find the enhanced tier considerations on evacuation, lockdown and communication useful, because large numbers affect what procedures are appropriate. See exemptions and special cases.
Penalties and offences by tier
The SIA can give a penalty notice if it is satisfied, on the balance of probabilities, that a requirement has been breached. It must consider the effects of the breach, any steps taken to put it right and the person's ability to pay, and the penalty must be proportionate.
| Sanction | Standard tier | Enhanced tier and qualifying events |
|---|---|---|
| Non-compliance penalty (maximum) | £10,000 | £18 million or 5% of qualifying worldwide revenue, whichever is higher |
| Daily penalty for continuing to ignore a compliance or restriction notice (maximum) | £500 a day | £50,000 a day |
| Failing to attend an SIA interview when required (maximum penalty) | £5,000 | £5,000 |
| Compliance notice | Available | Available, and failing to comply is a criminal offence |
| Restriction notice | Not available | Available, and failing to comply is a criminal offence |
Some criminal offences apply at both tiers: failing to comply with an SIA information notice, obstructing an inspector, impersonating one, and knowingly or recklessly giving false or misleading information. Our penalties guide explains these in detail.
Which tier am I in, and what next?
- Assess the number of people reasonably expected at your busiest predictable times, including staff, and record how you did it.
- Check whether a special case applies, such as a place of worship or school.
- Confirm the responsible person, and if you are an enhanced tier organisation, who will be the senior individual.
- For standard tier, draft and brief your four procedures. For enhanced tier, also start assessing measures and planning the compliance document.
- Diary a review, for example annually and whenever your use, layout or events change.
Standard tier venues can use our fixed price packs for tailored procedures, a staff briefing and training. Enhanced tier venues usually need a site specific assessment, and our enhanced tier page explains how we can introduce you to a specialist.
Frequently asked questions
What is the threshold for the enhanced tier?
800 or more people, including staff, reasonably expected on the premises at the same time, from time to time. Qualifying events of 800 or more with entry checks follow the same requirements.
Do standard tier premises need a written plan?
There is no legal requirement to prepare a document at standard tier. However, the Home Office guidance says you should, both to brief staff and because it may be difficult to demonstrate compliance to the SIA otherwise.
Can a large church or school be in the enhanced tier?
No. Places of worship, childcare settings, schools and further education premises that qualify are always standard tier, even with 800 or more people. Universities can be enhanced tier.
Do enhanced tier premises have to install CCTV or barriers?
Not automatically. They must assess which measures are appropriate and put them in place so far as reasonably practicable, weighing effectiveness against cost, time and difficulty. What is required will vary between sites.
Sources
General information based on the Act and published guidance, not legal advice. Check the official statutory guidance on GOV.UK for your situation.