On June 23, 2025, the European Commission and EU Member States published a Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography (PQC). Developed by a dedicated PQC work stream within the NIS Cooperation Group, the document sets phased milestones for migration across the Union.
According to the roadmap publication, all Member States should begin transitioning to PQC by the end of 2026 by initiating national strategies, conducting cryptographic inventories, and taking initial migration steps. High-risk use cases, particularly those involving critical infrastructure, must be secured with PQC no later than the end of 2030. Full transition for as many systems as feasible should be completed by the end of 2035.
Recommended actions include adopting a risk-based approach to prioritize migration, using standardized and hybrid cryptographic solutions combining classical and quantum-safe algorithms, and maintaining cryptographic inventories using formats such as the Cryptographic Bill of Materials. A public consultation seeking stakeholder feedback on the roadmap remained open until September 29, 2025.