The Terrorism (Protection of Premises) (Notification Requirements) Regulations 2026

Published: Tue 14th Jul 26

These regulations define the procedural and informational requirements for persons responsible for "qualifying premises" and "qualifying events" to notify the Security Industry Authority.

They establish specific timeframes for initial registration and the updating of inaccurate information, ranging from 14 to 28 days depending on the nature of the entity.

The regulations apply to owners and operators of venues and events across England, Wales, Scotland, and Northern Ireland that meet the criteria of the Terrorism (Protection of Premises) Act 2025, mandating the submission of detailed operational, contact, and licensing data via a specified online portal.

Arguments For

The order states that these regulations are necessary to implement the notification requirements established by section 9 of the Terrorism (Protection of Premises) Act 2025.
Proponents argue that the gathered information, such as capacity and licensing details, enables the Security Industry Authority to perform its functions under the Act.
The document specifies that requiring notifications via an online portal ensures a standardized method of data collection for security oversight.
The legislation asserts that establishing clear timelines for reporting changes (14 or 28 days) maintains the accuracy of the national registry of qualifying premises and events.

Arguments Against

Legal scholars may question the ambiguity of "reasonably necessary" in Regulation 5(3), which grants the Security Industry Authority broad discretion to request additional unspecified information.
Affected parties, particularly small businesses or volunteer-led events, might find the 14-day notification window for qualifying events difficult to comply with once an event is publicized.
Civil liberties organizations might express concern regarding the scope of information collected, including social media accounts and contact details of associated individuals not directly responsible for the premises.
Implementation difficulties may arise regarding the requirement for past responsible persons to submit notifications if they ceased their role shortly after the commencement day.

Citation, commencement and extent

-(1) These Regulations may be cited as the Terrorism (Protection of Premises) (Notification Requirements) Regulations 2026.

(2) These Regulations come into force on the date on which section 9(1) (notification requirements) of the Terrorism (Protection of Premises) Act 2025 comes fully into force.

(3) These Regulations extend to England and Wales, Scotland and Northern Ireland.

This section establishes the official name of the regulations and their geographic jurisdiction, which includes all four nations of the United Kingdom.

It links the activation of these rules to the date when the primary notification requirements of the 2025 Act become operational.

Interpretation

-(1) In these Regulations-

'the Act' means the Terrorism (Protection of Premises) Act 2025;

'commencement day' means the day on which section 9(1) of the Act comes into force;

'responsible person' means the person responsible for the qualifying premises or qualifying event.

(2) In these Regulations, a qualifying event is first publicised when the date of the event is first made available to members of the public for the purpose of advertising the event-

(a) by, or with the authority of, a person responsible for the event, and
(b) through any medium which enables members of the public to access that information.

(3) In paragraph (2), 'members of the public' include members or guests of a club, association or similar body where information about the qualifying event is first made known, or only made known, to the members or guests of the club, association or similar body.

(4) Reference in these Regulations to the contact details of any person means the following information in relation to that person, where that information is available-

(a) a telephone number,
(b) an email address, and
(c) a postal address, including postcode.

Definitions of key terms used throughout the document are provided here to ensure legal clarity.

It specifies that an event is considered "publicised" as soon as its date is shared with the public, including private club members, through any medium.

It also defines "contact details" as including a phone number, email, and postal address.

The required time

-(1) For the purposes of section 9(1) (notification requirements for qualifying premises) of the Act, the 'required time' means-

(a) in the case of a person responsible for qualifying premises, before the end of-

(i) the period of three months beginning with commencement day, or
(ii) if later, the period of 28 days beginning with the day on which that person becomes a responsible person in relation to the qualifying premises in question;
(b) in the case of a person who has ceased to be responsible for qualifying premises, before the end of-
(i) the period of three months beginning with commencement day, or
(ii) if later, the period of 28 days beginning with the day on which that person ceased to be responsible for the qualifying premises in question.

(2) For the purposes of section 9(2) (notification requirements for qualifying events) of the Act, the 'required time' means-

(a) in the case of a person responsible for a qualifying event-
(i) where the qualifying event is first publicised on or before commencement day, before the end of the period of 14 days beginning with commencement day;
(ii) where the qualifying event is first publicised after commencement day, before the end of the period of 14 days beginning with the day on which it is so publicised;
(b) in the case of a person who has ceased to be responsible for the qualifying event, before the end of the period of 14 days beginning with the day on which they ceased to be responsible for the qualifying event in question.

(3) For the purposes of section 9(4) of the Act (notifications required when notified information ceases to be accurate), the 'required time' means before the end of-

(a) where the information relates to qualifying premises, the period of 28 days beginning with the day on which information notified to the Security Industry Authority under section 9(1) of the Act first ceased to be accurate, or
(b) where the information relates to a qualifying event, the period of 14 days beginning with the day on which information notified to the Security Industry Authority under section 9(2) of the Act first ceased to be accurate.

This section sets strict deadlines for when information must be submitted to the authorities.

Premises managers generally have 28 days to report changes or new status, while event organizers have a shorter window of 14 days from the date an event is publicized.

It also mandates that former responsible persons must report their departure within these same timeframes.

Person making the notification

A notification required under section 9 of the Act may be made by-

(a) the responsible person, or
(b) a person authorised by the responsible person to make the notification on their behalf.

This provision clarifies that the legally responsible individual does not have to submit the paperwork personally.

They may delegate the task of notifying the Security Industry Authority to an authorized representative.

Notification of information

-(1) A notification made in relation to qualifying premises must include-

(a) the information set out in-
(i) Parts 1 and 2 of the Schedule, and
(ii) in the case of enhanced duty premises, Part 3 of the Schedule,
(b) confirmation that the person submitting the notification is-
(i) the responsible person, or
(ii) authorised to do so on behalf of the responsible person, and
(c) confirmation that the person submitting the notification is aware that knowingly or recklessly providing false or misleading information is an offence under section 25 of the Act.

(2) A notification made in relation to a qualifying event must include-

(a) the information set out in Parts 1, 3 and 4 of the Schedule,
(b) confirmation that the person submitting the notification is-
(i) the responsible person, or
(ii) authorised to do so on behalf of the responsible person, and
(c) confirmation that the person submitting the notification is aware that knowingly or recklessly providing false or misleading information is an offence under section 25 of the Act.

(3) The Security Industry Authority may request the person responsible for the qualifying premises, or the qualifying event, to provide any additional information specified by the Authority which is reasonably necessary to enable the Authority to perform its functions under the Act.

(4) The information which may be requested under paragraph (3) includes-

(a) information relating to any person who has control of the qualifying premises or qualifying event,
(b) information relating to the qualifying premises, and
(c) information relating to the qualifying event,

which is not required to be provided under the Schedule.

(5) The person making the notification must submit information-

(a) in the form required by the Security Industry Authority, and
(b) using the online portal established by the Security Industry Authority for notifications under the Act, unless the Authority directs otherwise.

This section dictates the mandatory content of the notification and the method of delivery.

It requires a declaration that the person submitting the data understands that providing false information is a criminal offense.

Additionally, it empowers the Security Industry Authority to demand extra information beyond the standard schedule and requires all submissions to be made via a specific online portal.

Notification of information which has ceased to be accurate

-(1) The person responsible for qualifying premises or a qualifying event must notify the Security Industry Authority when information previously notified to the Security Industry Authority in relation to the qualifying premises or qualifying event has ceased to be accurate.

(2) For the purposes of paragraph (1), 'information previously notified to the Security Industry Authority' includes information notified to the Authority by any person who ceased to be responsible for the qualifying premises or qualifying event after making the notification.

(3) The notification required under paragraph (1)-

(a) must include revised details of any information which is no longer accurate, and
(b) must be given before the end of the following periods, beginning in each case on the day on which the information first ceased to be accurate-
(i) 28 days, where the information concerns qualifying premises, and
(ii) 14 days, where the information concerns a qualifying event.

Responsible persons are legally obligated to keep their registered information up to date.

This requirement persists even if the original information was submitted by a predecessor.

The timeline for these updates matches the initial registration deadlines: 28 days for buildings and 14 days for events.

Review

-(1) The Secretary of State must from time to time-

(a) carry out a review of the regulatory provision contained in these Regulations, and
(b) publish a report setting out the conclusion of the review.

(2) The first report must be published before the end of the period of five years beginning with the commencement date.

(3) Subsequent reports must be published at intervals not exceeding five years.

(4) Section 30(4) of the Small Business, Enterprise and Employment Act 2015 requires that a report published under this regulation must, in particular-

(a) set out the objectives intended to be achieved by the regulatory provision referred to in paragraph (1)(a),
(b) assess the extent to which those objectives are achieved,
(c) assess whether those objectives remain appropriate, and
(d) if those objectives remain appropriate, assess the extent to which they could be achieved in another way which involves less onerous regulatory provision.

(5) In this regulation, 'regulatory provision' has the same meaning as in sections 28 to 32 of the Small Business, Enterprise and Employment Act 2015 (see section 32 of that Act).

This section requires the government to periodically evaluate the effectiveness and necessity of these regulations.

The first review must occur within five years of commencement, specifically assessing whether the rules place an unnecessary burden on small businesses and if the safety objectives could be met through less restrictive means.

Schedule

Information to be notified

Part 1 Qualifying premises and qualifying events

The names and contact details of-
(a) each person who is responsible for the qualifying premises or qualifying event under section 4(1) of the Act ('the responsible person'), and
(b) any other person who is subject to the obligation to co-ordinate with the responsible person under section 8(4) of the Act.
Where the responsible person is a corporate body-
(a) its name, including, in the case of a registered company, its registered name, and
(b) any names under which it trades.
Any registered company number, or registered charity number, of the responsible person.
The name, contact details and relationship to the responsible person of any other person other than the responsible person who, to any extent-

(a) has control of the qualifying premises, or
(b) has control of the qualifying event.

Where the person submitting the notification is not the responsible person-

(a) their name and role,
(b) their relationship to the responsible person,
(c) their contact details, and
(d) confirmation that they are authorised to submit the notification on behalf of the responsible person.

The postal address of the qualifying premises or the place where the qualifying event is being held, including its postcode.
Whether or not the responsible person is also responsible for other qualifying premises, or qualifying events.
The greatest number of individuals who can reasonably be expected to be present on the qualifying premises or at the qualifying event at the same time.
The method used to calculate the figure given in response to paragraph 8.
The website address for any website and information on any online social media platform and any social media account which is-

(a) under the control of the responsible person, or of any other person who has control to any extent over the qualifying premises or qualifying event, and
(b) being used to advertise the qualifying premises or qualifying event.

-(1) Whether the qualifying premises or qualifying event have, an application has been submitted for, or notice has been given in relation to, any of the following licences, certificates or permissions-

(a) a licence to sell alcohol, including a temporary licence or notice;
(b) a licence or other permission from any authority to provide entertainment;
(c) a general safety certificate, within the meaning of section 1(4) of the Safety of Sports Grounds Act 1975, or Article 12(1) of the Safety of Sports Grounds (Northern Ireland) Order 2006;
(d) a safety certificate for a regulated stand under Part 3 of the Fire Safety and Safety of Places of Sport Act 1987, or Part 3 of the Safety of Sports Grounds (Northern Ireland) Order 2006.

(2) Where any licence, certificate or permission ('relevant authorisations') listed in subparagraph (1) is in force in relation to the qualifying premises or qualifying event-

(a) a description of the relevant authorisation;
(b) the dates for which it is in force;
(c) the issuing authority, or, in the case of a temporary event notice under section 100 of the Licensing Act 2003, the authority to which notice was given.

Part 2 Qualifying premises

Confirmation that the premises satisfy the definition of 'qualifying premises' in section 2 of the Act.
The relevant Schedule 1 use of the qualifying premises.
Whether the qualifying premises consist of a group of buildings, and if so, how many buildings there are in the group.
The address of each building which forms part of the qualifying premises, if there is more than one address and postcode for the qualifying premises.
Where the qualifying premises, or any buildings which form part of the qualifying premises, also form part of larger premises-

(a) the name and address of the larger premises, and
(b) whether the larger premises are also qualifying premises.

Whether the premises have any seating, whether permanent or temporary, in any area adjoining the premises, including seating on the pavement or road outside the premises.

Part 3 Enhanced duty premises and qualifying events

Where an individual has been designated under section 10 of the Act as having responsibility for ensuring that the responsible person complies with the requirements imposed on them by or under the Act ('the senior individual'), the following information in relation to that individual-

(a) their name,
(b) their contact details,
(c) what position they hold in relation to the enhanced duty premises or qualifying event, and
(d) the date on which they were designated as senior individual.

Confirmation that the senior individual, or where no senior individual has been designated, the responsible person, understands the requirements-

(a) to prepare a document satisfying the requirements of section 7 of the Act (enhanced duty premises and qualifying events: documenting compliance) (a 'compliance document');
(b) to provide a copy of the compliance document to the Security Industry Authority as soon as reasonably practicable after it has been prepared;
(c) to provide a copy of a revised compliance document to the Security Industry Authority before the end of the period of 30 days beginning with the day of its revision.

Part 4 Qualifying events

Confirmation that the event satisfies the definition of 'qualifying event' in section 3 of the Act.
The date and time at which the qualifying event is to be held.
The date and time at which persons attending the qualifying event will first be admitted to the event.
A brief description of the qualifying event.
Details of any larger event of which the qualifying event forms part, including, where known, whether a separate notification has been made in relation to the larger event under the Act, and the number assigned by the Security Industry Authority to that notification.
If known, whether the premises where the qualifying event is being held are qualifying premises, and if they are-

(a) whether they are standard duty premises, or enhanced duty premises, and
(b) any number which has been assigned to the premises by the Security Industry Authority in connection with previous notifications under the Act.

Whether an event which is the same as the qualifying event has taken place in the past, and if so-

(a) the date on which the event last took place,
(b) whether the event was held at the same premises, and if not, the postal address of the premises where it was held,
(c) whether the event took place under the same name, and associated with the same brand name, or other distinctive marks used to distinguish the event from other events, and
(d) the name and contact details of the person who was responsible for that event.

Whether the qualifying event is intended to be repeated in future.
The date on which the qualifying event was, or will be, first publicised and the format of the publication, including-

(a) in the case of publication on a website, the website address,
(b) in the case of publication by social media-
(i) the platform on which it is being published, and
(ii) the account through which it is being published.

The Schedule provides an exhaustive list of the data points required for notification.

It covers general identifiers like contact info and maximum capacity (Part 1); premises-specific data like building counts and outdoor seating (Part 2); compliance-focused info for larger venues, including senior individual designations (Part 3); and event-specific details such as publicity dates, past occurrences, and description (Part 4).

View Source

Culture and Sport Justice Transport

The Air Navigation (Restriction of Flying) (Cardiff) Regulations 2026

Tue 14th Jul 26

Prohibited unmanned aircraft from flying below 1,100 feet within a specific area of Cardiff on 16 July 2026.

Justice Transport

The Air Navigation (Restriction of Flying) (Dovestones Reservoir, Manchester) (Emergency) (No. 2) Regulations 2026

Tue 14th Jul 26

Established an emergency restricted flight zone below 3,000 feet around Dovestones Reservoir.

Economy Environment Finance Justice Trade

The Carbon Border Adjustment Mechanism (Calculation of CBAM Rate and Determination of Carbon Price Relief) Regulations 2026

Tue 14th Jul 26

Established the formulas for calculating UK CBAM rates and defined the verification procedures for importers to claim relief for carbon prices paid abroad.

Justice Transport