[{"data":1,"prerenderedAt":91},["ShallowReactive",2],{"news-\u002Fnews\u002Feu-commission-nis2-pqc-proposal":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":72,"seo":79,"seoTitle":80,"signposts":8,"slug":81,"stats":8,"stem":82,"tags":83,"tldr":89,"__hash__":90},"news\u002Fnews\u002Feu-commission-nis2-pqc-proposal.md","European Commission Proposes Writing Post-Quantum Migration Into NIS2","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"commission-proposes-writing-post-quantum-migration-into-nis2","Commission proposes writing post-quantum migration into NIS2",[18,19,20],"p",{},[21,22,23],"strong",{},"20 JANUARY 2026, BRUSSELS",[18,25,26],{},"The European Commission proposed on 20 January 2026, in COM(2026) 13 final, to write the post-quantum transition into NIS2. The proposal would amend the directive so that the national strategies required under Article 7(2)(k) explicitly cover the move to post-quantum cryptography. It sets a 2030 target for critical systems and 2035 for medium-risk systems, matching the risk-based staging the EU roadmap already uses.",[18,28,29],{},"The step matters because of its legal weight. The EU roadmap is soft law that sets direction, while NIS2 is a binding directive. Writing the transition into NIS2 would oblige member states to reflect post-quantum migration in the national strategies the directive already requires, turning the roadmap's milestones into a legal expectation rather than a recommendation.",[18,31,32],{},"The proposal remains pending. It must pass the EU legislative process before it binds anyone, and member states would then transpose it into national law. Until that happens, the dates carry the Commission's intent rather than legal force, so organizations should track the proposal's progress rather than treat its deadlines as fixed.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," The proposal signals that the European Union intends to give its post-quantum timeline legal teeth through NIS2 rather than leaving it as guidance. If it passes, critical-system operators across the Union would face a 2030 expectation grounded in a binding directive. Organizations in scope of NIS2 should watch the proposal closely and begin discovery now, since the directive route would narrow their room to delay.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2026-01-20","A January 2026 Commission proposal would write post-quantum migration into NIS2 national strategies, with 2030 for critical and 2035 for medium-risk systems.",false,"md",[49,52,55],{"q":50,"a":51},"What would the NIS2 proposal change?","The proposal, COM(2026) 13 final, would amend NIS2 so that Article 7(2)(k) national strategies explicitly cover the post-quantum transition. It would set a 2030 target for critical systems and 2035 for medium-risk systems. The proposal is pending, not yet law.",{"q":53,"a":54},"How does this differ from the EU roadmap?","The roadmap is soft law and sets direction. Writing the transition into NIS2 would make it part of a binding directive, so member states would have to reflect the post-quantum transition in the national strategies NIS2 already requires. It raises the legal weight of the timeline.",{"q":56,"a":57},"When would it take effect?","The proposal is pending as of early 2026. It must pass the EU legislative process before it binds member states, and member states would then transpose it into national law. Organizations should track its progress rather than treat the dates as settled.",[59],"brussels","\u002Fassets\u002Fog-default.png",[62,63],"Government Facilities","Cross-Sector",{},"2026-09-21",true,"\u002Fnews\u002Feu-commission-nis2-pqc-proposal",[69],{"label":70,"url":71},"European Commission, \"Proposal amending Directive (EU) 2022\u002F2555 (NIS2),\" COM(2026) 13 final, Jan. 20, 2026.","https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002F?uri=CELEX:52026PC0013",[73,76],{"label":74,"url":75},"EU Roadmap Sets 2026, 2030 and 2035 Post-Quantum Milestones","\u002Fnews\u002Feu-roadmap-2026-2030-2035-milestones",{"label":77,"url":78},"EU DORA Governs Financial Firms' Technology Risk","\u002Fnews\u002Feu-dora-financial-ict-risk-quantum",{"title":5,"description":45},"EU Proposes Writing PQC Migration Into NIS2","eu-commission-nis2-pqc-proposal","news\u002Feu-commission-nis2-pqc-proposal",[84,85,86,87,88],"NIS2","EU PQC roadmap","PQC migration","2030 deadline","for government","A January 2026 Commission proposal would write post-quantum migration into NIS2 national strategies, with critical systems by 2030 and medium-risk systems by 2035.","CFcMnkBNlhbM9cTuvja7yWIKSRJRNEjnrxHGRwiphBs",1792182886024]