QSC Atlas

← All countries

European Union

EU roadmap Standard-contextualiser

The European Union coordinates the post-quantum transition through Commission Recommendation (EU) 2024/1101 and a Coordinated Implementation Roadmap, asking Member States to migrate in a synchronised way, with the Quantum Europe Strategy confirming that the EU and Member States are implementing the Recommendation. ENISA provides technical studies, and through the EUCC certification scheme ENISA and the ECCG have agreed several asymmetric post-quantum mechanisms and hybrid key-combiner mechanisms for products seeking certification. ETSI develops European quantum-safe standards including a hybrid key exchange standard. A 2026 Commission proposal would require Member States to adopt post-quantum migration policies.

Regulatory basis

  • NIS2 Directive (EU) 2022/2555, Art. 21(2)(h) EU Binding law
  • DORA, Regulation (EU) 2022/2554 EU Binding law
  • EUCC certification scheme, Agreed Cryptographic Mechanisms v2 EU Binding (market access)
  • Commission Recommendation (EU) 2024/1101 on PQC EU Soft law
  • NIS Cooperation Group Coordinated Implementation Roadmap (2025) EU Soft law
  • Proposal COM(2026) 13 final, mandatory Member State PQC migration policies EU Soft law
  • Quantum Europe Strategy, COM(2025) 363 final EU Soft law

Legal status: Binding

No binding PQC-specific requirement at EU level; member states are encouraged to publish national roadmaps and migrate on the coordinated 2026/2030/2035 timeline, while the NIS2 'state-of-the-art' duty is expected to absorb post-quantum requirements over time.

Standards and algorithms

No standards or algorithms specified.

Hybrid stance

Recommended

Migration timeline

No published migration timeline.

Target completion: None stated

International standards processes

  • ENISA post-quantum standardisation studies Surveys and reports on the state of PQC standardisation
  • ETSI TC ESI PQC Working Group Develops post-quantum signatures, certificates, public key infrastructures and transition policies
  • EUCC Agreed Cryptographic Mechanisms (ENISA / ECCG) Agrees post-quantum and hybrid cryptographic mechanisms for ICT products under EUCC certification

Governmental and standards bodies

  • European Commission Issues the Coordinated Implementation Roadmap and Recommendation (EU) 2024/1101, the Quantum Europe Strategy, and the proposal to require Member State PQC migration policies
  • ENISA EU Agency for Cybersecurity, publishes studies on the state of post-quantum standardisation and integration and co-publishes the EUCC Agreed Cryptographic Mechanisms
  • ECCG European Cybersecurity Certification Group, agrees the EUCC cryptographic mechanisms including post-quantum and hybrid key-combiner mechanisms
  • ETSI European standards body developing quantum-safe standards including a hybrid key exchange standard and the TC ESI PQC working group
  • NIS Cooperation Group Sets out the Coordinated Implementation Roadmap recommendations for Member States
  • European Parliament Resolution on the EU Cybersecurity Strategy calling for further research into post-quantum algorithms
  • EPRS European Parliamentary Research Service, briefings on cryptographic security, digital sovereignty and quantum technologies identifying PQC as the near-to-medium-term priority
  • EESC Opinion noting the need to transition to quantum-resistant cryptography
  • ECB Speeches and the Pontes user requirements document requiring post-quantum resilient cryptographic capabilities through crypto-agility

Key institutional documents

Advising on this transition, or your own sector's? Request a briefing →