pqcstatus
Regulation & guidance

EU Coordinated Implementation Roadmap for the Transition to PQC: cryptography requirements and deadlines

Official guidance

Common EU timeline: first steps and national roadmaps by end of 2026, high-risk systems migrated by end of 2030, medium-risk by end of 2035.

At a glance

TypeOfficial guidance
JurisdictionEU
Who it applies toEU Member States, and through them operators of critical and high-risk use cases; a de facto reference for the private sector.

Key dates

  1. First steps implemented (including cryptographic inventory), national PQC roadmaps in place, planning and pilots started for high- and medium-risk use cases.
  2. High-risk use cases migrated; quantum-safe software and firmware upgrades enabled by default; quantum-vulnerable public key no longer used stand-alone for high-risk cases.
  3. Medium-risk use cases migrated; low-risk as much as feasible.

Sources

  1. A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography (v1.1) · European Commission / NIS Cooperation Group (guidance)

Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.

Frequently Asked Questions

Who must comply with EU Coordinated Implementation Roadmap for the Transition to PQC?

EU Member States, and through them operators of critical and high-risk use cases; a de facto reference for the private sector.

What are the key dates of EU Coordinated Implementation Roadmap for the Transition to PQC?

December 31, 2026: First steps implemented (including cryptographic inventory), national PQC roadmaps in place, planning and pilots started for high- and medium-risk use cases. December 31, 2030: High-risk use cases migrated; quantum-safe software and firmware upgrades enabled by default; quantum-vulnerable public key no longer used stand-alone for high-risk cases. December 31, 2035: Medium-risk use cases migrated; low-risk as much as feasible.