Portugal

Portugal's activity is centred on the National Cybersecurity Centre, whose National Coordination Centre funds work on the security evaluation of post-quantum cryptography primitives and the security of post-quantum algorithm implementations, and which lists post-quantum cryptography among the priority topics for its C-DAYS 2026 conference. The posture is one of research and awareness, with no published national migration guidance, algorithm list or timeline. Portugal follows the European Union coordinated approach, under which essential and important entities must use state-of-the-art cryptography and migration is encouraged towards high-risk use cases by 2030 and full migration by 2035, but neither obligation yet names post-quantum algorithms specifically.

Governance credibility

Governance credibility scores for Portugal, each out of two. Hover or focus a row to highlight its axis.

Criterion	Score	Confidence
Relevance	2.0 / 2	High
Coherence	1.5 / 2	High
Effectiveness	1.5 / 2	High
Efficiency	2.0 / 2	High
Governance	1.0 / 2	High
Impact	2.0 / 2	High

Regulatory basis

• NIS2 Directive (EU) 2022/2555, Art. 21(2)(h) EU Binding (market access)
• DORA, Regulation (EU) 2022/2554 (financial sector) EU Binding (market access)
• Commission Recommendation (EU) 2024/1101 on a coordinated PQC roadmap EU Soft law
• NIS Cooperation Group Coordinated Implementation Roadmap (2026/2030/2035) EU Soft law

Legal status: Binding

Essential and important entities must use state-of-the-art cryptography under NIS2, transposed into national law, and financial entities face equivalent duties under DORA; neither yet names post-quantum algorithms specifically. Migration follows the EU coordinated roadmap, with high-risk use cases targeted for 2030 and full migration by 2035, which is encouraged rather than mandated.

Standards and algorithms

No standards or algorithms specified.

Hybrid stance

None stated

Migration timeline

today

2030

2035

20252036

1. 2030High-risk use cases migrated
2. 2035Full migration of all systems complete

Target completion: 2035

International standards processes

• NIS Cooperation Group co-authored the EU coordinated PQC roadmap

Governmental and standards bodies

• CNCS National Cybersecurity Centre, national authority for cyber security

Key institutional documents

• ROSE - CNCS R&D Document CNCS · T1
• Emerging Technologies Report 2023 (CNCS Observatory) CNCS · 2023 · T1
• Call for Presentations - C-DAYS 2026 (CNCS) CNCS · 2026 · T1
• NCC-PT - National Coordination Centre (CNCS) CNCS · T1

Advising on this transition, or your own sector's? Request a briefing →