What public-facing businesses needed to understand in 2025 about the Protect Duty direction of travel

For public-facing businesses, one of the important themes of 2025 was not just what the Protect Duty might eventually require in technical terms, but what direction of travel it was clearly pointing toward.

The signal was straightforward: businesses open to the public needed to think more seriously about preparedness, practical risk awareness, and how responsibility would be evidenced in the real world.

Why the direction of travel matters

Businesses often wait for precise legal obligations before changing how they operate. That is understandable, but it can be a mistake when the broader expectation is already becoming visible.

The Protect Duty conversation has consistently pushed organisations toward stronger thinking around:

• awareness of the public-facing risk environment
• clarity over who owns relevant responsibilities
• practical planning rather than vague assumptions
• evidence that risk considerations are embedded in operations

That means businesses do not need to wait for every detail to understand the strategic message.

What public-facing businesses often underestimated

Many organisations assumed the main issue would be a future box-ticking exercise. In reality, the wider implication is more operational than that.

The harder questions are about whether the business can show:

• that relevant risks have been considered sensibly
• that responsibility is not diffuse or accidental
• that site-specific realities have been thought through
• that records and planning are accessible if challenged
• that preparedness is not entirely dependent on one individual remembering what was discussed

Those are management questions as much as compliance questions.

Why physical premises add complexity

Businesses with public-facing sites have to manage variation. Different sites have different layouts, operating patterns, occupancy pressures, staffing realities, and local contexts. That makes consistency more difficult.

Without a clear coordination layer, public-facing preparedness can end up fragmented:

• one site takes it seriously
• another assumes it is a head-office topic
• one manager documents discussions properly
• another keeps everything informal

That is exactly the kind of inconsistency businesses need to avoid.

The practical lesson from 2025

The main lesson was not that every public-facing business needed to become a security specialist overnight. It was that businesses should stop treating this area as abstract.

A stronger response starts with practical steps:

• identifying ownership
• understanding the estate and public-facing exposure
• improving record clarity
• ensuring relevant conversations and actions are visible
• building a more consistent standard across sites

The Northstead view

The direction of travel matters because it tells businesses where expectations are heading. Public-facing organisations should aim to be more prepared, more organised, and better able to evidence their thinking before they are forced into reactive catch-up.

That is the smarter commercial posture, and increasingly it is the more credible one too.