[{"data":1,"prerenderedAt":125},["ShallowReactive",2],{"news-\u002Fresources\u002Fnews\u002Fus-uk-eu-post-quantum-deadlines-aligned":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":87,"date":88,"description":89,"draft":90,"extension":91,"faqs":8,"findingsSource":8,"image":92,"keyFindings":8,"meta":93,"modified":88,"navigation":94,"path":95,"pullquote":8,"recommendations":8,"references":96,"related":106,"seo":113,"signposts":8,"slug":114,"stats":8,"stem":115,"tags":116,"tldr":123,"__hash__":124},"news\u002Fresources\u002Fnews\u002Fus-uk-eu-post-quantum-deadlines-aligned.md","One Clock, Three Jurisdictions: How the U.S., UK, and EU Post-Quantum Deadlines Line Up","Steve Enlow II","",null,{"type":10,"value":11,"toc":80},"minimark",[12,17,21,25,37,47,57,61,64,67,71],[13,14,16],"h2",{"id":15},"three-governments-one-window","Three governments, one window",[18,19,20],"p",{},"For years, teams treated post-quantum migration as an American problem with a distant 2035 date. That framing no longer holds. The United States, the United Kingdom, and the European Union have each published concrete timelines, and they converge on the same window of 2030 to 2035. A multinational enterprise does not face three separate programs. It faces one overlapping clock, and the earliest milestone on that clock now sits inside this decade.",[13,22,24],{"id":23},"how-the-three-timelines-line-up","How the three timelines line up",[18,26,27,31,32,36],{},[28,29,30],"strong",{},"The United States"," moved first and hardest. Executive Order 14412 requires post-quantum key establishment on high-impact federal systems by 2030 and digital signatures by 2031, and it extends a 2030 date to covered contractors through federal acquisition rules ",[33,34,35],"span",{},"1",". The contractor clause reaches the commercial supply chain, so the American date behaves like a market standard rather than a government-only rule.",[18,38,39,42,43,46],{},[28,40,41],{},"The United Kingdom"," set a three-phase path through its National Cyber Security Centre. Organizations should complete cryptographic discovery and a migration plan by 2028, finish high-priority upgrades by 2031, and complete migration by 2035 ",[33,44,45],{},"2",". The NCSC frames discovery as the first hard milestone, not a preliminary step.",[18,48,49,52,53,56],{},[28,50,51],{},"The European Union"," published a coordinated roadmap through the NIS Cooperation Group. Member States should adopt national transition plans by 2026, secure critical infrastructure by 2030, and complete the transition by 2035 ",[33,54,55],{},"3",". The roadmap ties directly to NIS2 and to the financial-sector resilience rules under DORA, which pulls regulated industries onto the same schedule.",[13,58,60],{"id":59},"what-the-alignment-means-for-enterprises","What the alignment means for enterprises",[18,62,63],{},"The convergence is good news disguised as bad news. Because the three regimes point at the same cryptographic problem and the same replacement standards, the discovery work you do once satisfies all of them. You do not run a separate inventory for Washington, London, and Brussels. You build one complete cryptographic inventory, map each finding to the post-quantum standards, and then report against whichever regulator asks.",[18,65,66],{},"The trap is treating the deadlines as far away because 2035 anchors the conversation. The binding near-term dates already landed. U.S. federal systems answer to 2030, UK organizations answer to a 2028 discovery milestone, and EU Member States answer to 2026 for their national plans. A migration of this scale takes years, so the enterprises that start discovery now will meet every one of these dates from the same body of work.",[13,68,70],{"id":69},"one-inventory-every-jurisdiction","One inventory, every jurisdiction",[18,72,73,74,79],{},"This is exactly why ",[75,76,78],"a",{"href":77},"\u002Fqutrust","QuTrust"," builds a single cryptographic inventory across all seven surfaces and maps every finding to the standards each regulator recognizes. One analysis, one roadmap, and evidence you can hand to a U.S. auditor, a UK regulator, or an EU supervisor without translating it three times. The clock is one clock. Your migration should be one program.",{"title":7,"searchDepth":81,"depth":81,"links":82},2,[83,84,85,86],{"id":15,"depth":81,"text":16},{"id":23,"depth":81,"text":24},{"id":59,"depth":81,"text":60},{"id":69,"depth":81,"text":70},"Analysis","2026-07-01","The U.S. (EO 14412), UK (NCSC), and the EU roadmap now set post-quantum deadlines converging on 2030 to 2035. Here is how the three timelines line up for enterprises.",false,"md","\u002Fassets\u002Fog-default.png",{},true,"\u002Fresources\u002Fnews\u002Fus-uk-eu-post-quantum-deadlines-aligned",[97,100,103],{"label":98,"url":99},"The White House, \"Securing the Nation Against Advanced Cryptographic Attacks,\" Executive Order 14412, Washington, DC, USA, Jun. 22, 2026.","https:\u002F\u002Fwww.whitehouse.gov\u002Fpresidential-actions\u002F2026\u002F06\u002Fsecuring-the-nation-against-advanced-cryptographic-attacks\u002F",{"label":101,"url":102},"National Cyber Security Centre, \"Timelines for migration to post-quantum cryptography,\" NCSC (UK), 2025.","https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fpqc-migration-timelines",{"label":104,"url":105},"European Commission and NIS Cooperation Group, \"A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography,\" Jun. 2025.","https:\u002F\u002Fdigital-strategy.ec.europa.eu\u002Fen\u002Flibrary\u002Fcoordinated-implementation-roadmap-transition-post-quantum-cryptography",[107,110],{"label":108,"url":109},"What Executive Order 14412 Requires","\u002Fresources\u002Fnews\u002Fus-executive-order-14412-post-quantum-deadline",{"label":111,"url":112},"2028 Is the Post-Quantum Deadline Nobody Is Talking About","\u002Fresources\u002Fnews\u002F2028-the-post-quantum-deadline-nobody-is-talking-about",{"title":5,"description":89},"us-uk-eu-post-quantum-deadlines-aligned","resources\u002Fnews\u002Fus-uk-eu-post-quantum-deadlines-aligned",[117,118,119,120,121,122],"PQC migration","EO 14412","NCSC PQC timelines","EU PQC roadmap","2035 deadline","quantum readiness","The U.S., UK, and EU have set post-quantum deadlines that converge between 2030 and 2035, so a multinational enterprise faces one overlapping clock rather than three separate programs.","gMn0qT0_HzKeqJvOsXNDEMwYX8hGJfV_Tn1BTQXn4gc",1784747240129]