[{"data":1,"prerenderedAt":91},["ShallowReactive",2],{"news-\u002Fnews\u002Fhhs-aspr-signals-pq-guidance-for-hospitals":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":72,"seo":79,"seoTitle":80,"signposts":8,"slug":81,"stats":8,"stem":82,"tags":83,"tldr":89,"__hash__":90},"news\u002Fnews\u002Fhhs-aspr-signals-pq-guidance-for-hospitals.md","HHS and ASPR Signal Coming Post-Quantum Guidance for Hospitals","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"hhs-and-aspr-signal-coming-post-quantum-guidance-for-hospitals","HHS and ASPR signal coming post-quantum guidance for hospitals",[18,19,20],"p",{},[21,22,23],"strong",{},"3 SEPTEMBER 2026, WASHINGTON",[18,25,26],{},"HHS and its Administration for Strategic Preparedness and Response, ASPR, signalled on 3 September 2026 that post-quantum guidance for hospitals is coming. ASPR said it is working with partners on the guidance. The current resilience guidance, known as RISC 2.0, still contains no post-quantum content, so the signal points to future guidance rather than a published document.",[18,28,29],{},"Healthcare has a strong reason to prepare. An earlier HC3 briefing from 2022 noted that health data stays sensitive for decades, which makes it a prime target for harvest-now-decrypt-later. An adversary could record long-lived patient records today and decrypt them once a quantum computer exists, so the exposure is already real even before the guidance lands.",[18,31,32],{},"The signal functions as advance notice. Because the guidance is still in development and no binding healthcare post-quantum rule yet exists, healthcare organizations face no current mandate. Treating the signal as a prompt to begin foundational work, rather than waiting for the published guidance, gives them a head start on the slow parts of migration.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," The HHS and ASPR signal tells hospitals that post-quantum guidance is on the way, even though current resilience guidance omits it. Given that health data stays sensitive for decades, the harvest-now-decrypt-later risk is pressing for the sector. Healthcare organizations can start cryptographic discovery and inventory now, so they are ready to act on the guidance when ASPR and its partners publish it.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2026-09-03","HHS and ASPR signalled in September 2026 that post-quantum guidance for hospitals is coming; current resilience guidance has no post-quantum content yet.",false,"md",[49,52,55],{"q":50,"a":51},"What did HHS and ASPR signal?","On 3 September 2026, HHS and ASPR signalled that post-quantum guidance for hospitals is coming, saying ASPR is working with partners. The current resilience guidance, RISC 2.0, has no post-quantum content yet, so the signal points to future rather than published guidance.",{"q":53,"a":54},"Why does healthcare need post-quantum guidance?","An earlier HC3 briefing from 2022 noted that health data stays sensitive for decades, which makes it a prime target for harvest-now-decrypt-later. Long-lived patient records exposed today could be decrypted once a quantum computer exists, so the sector has strong reason to inventory and plan now.",{"q":56,"a":57},"Is any binding healthcare post-quantum rule in place?","No. The signal describes guidance in development, and the current RISC 2.0 resilience guidance contains no post-quantum requirements. Healthcare organizations should treat the signal as advance notice and begin foundational work rather than wait for a published mandate.",[59],"washington-dc","\u002Fassets\u002Fog-default.png",[62,63],"Healthcare and Public Health","Cross-Sector",{},"2026-10-01",true,"\u002Fnews\u002Fhhs-aspr-signals-pq-guidance-for-hospitals",[69],{"label":70,"url":71},"U.S. Department of Health and Human Services, Administration for Strategic Preparedness and Response (ASPR), \"Post-quantum guidance signal for the health sector,\" Sep. 3, 2026.","https:\u002F\u002Faspr.hhs.gov\u002F",[73,76],{"label":74,"url":75},"CISA, NSA and NIST Urge Organizations to Start Quantum-Readiness Planning","\u002Fnews\u002Fcisa-nsa-nist-quantum-readiness-factsheet",{"label":77,"url":78},"NIST 2021 Paper Warns Post-Quantum Migration Is Hard and Slow","\u002Fnews\u002Fnist-2021-paper-migration-is-hard-and-slow",{"title":5,"description":45},"HHS and ASPR Signal Post-Quantum Hospital Guidance","hhs-aspr-signals-pq-guidance-for-hospitals","news\u002Fhhs-aspr-signals-pq-guidance-for-hospitals",[84,85,86,87,88],"healthcare","quantum readiness","harvest now decrypt later","cryptographic discovery","for enterprises","HHS and ASPR signalled in September 2026 that post-quantum guidance for hospitals is coming, while current resilience guidance still contains no post-quantum content.","Guem5v9mSC1L8rxfoX0HtIJ2xsBNEL7tzpwNMiVye_U",1792182885062]