The Terrorism (Protection of Premises) Act 2025, known as Martyn’s Law, requires qualifying venues and events to prepare for the risk of a terrorist attack. Many will turn to technology: CCTV, screening and, in some cases, facial recognition. Each of these brings data protection duties of its own, and a security measure that breaches data protection law creates a new risk rather than removing one.
We help duty-holders meet their security obligations in a way that is lawful and proportionate, and that they can explain to the public.
What we deliver
- DPIAs for security technology, including CCTV, screening and facial recognition
- Policies for watchlists, retention and information sharing with police
- Privacy information and signage for attendees
- Governance of ticketing, accreditation and attendee data
- Outsourced DPO for venues and event organisers