January 2026 was defined by the rapid convergence of post-quantum cryptography migration from planning frameworks into operational guidance, coupled with several major national strategy announcements. The G7 Cyber Expert Group published a phased PQC transition roadmap targeting financial sector systems by 2035, with critical systems expected to migrate by 2030 to 2032. In the United States, a bipartisan Senate bill sought to reauthorize the lapsed National Quantum Initiative through 2034, while CISA published its first PQC product categories list to guide federal procurement. The European Union formally expanded EuroHPC’s mandate to include a dedicated quantum technologies pillar. And South Korea unveiled a ten-year roadmap to become the world’s leading quantum chip producer, entering the field with one of the most explicit industrial targets set by any government to date.
G7: Financial Sector Gets a PQC Migration Roadmap
What happened. The G7 Cyber Expert Group (CEG), co-chaired by the US Department of the Treasury and the Bank of England, released a roadmap for the financial sector’s transition to post-quantum cryptography on January 12, 2026. The document outlined six non-linear phases, from awareness and governance through migration execution and validation, and noted that current guidance from several jurisdictions “often points to 2035 as an overall target date” for quantum-resistant migration. Critical systems were expected to target earlier completion, around 2030 to 2032. The roadmap was also covered in a companion tracker post noting its release during Canada’s 2025 G7 presidency.
Why it matters. This is the first coordinated G7-level guidance that translates the cryptographic threat from quantum computing into a sector-specific, phased operational framework for finance. The six-phase structure, covering cryptographic inventory, dependency mapping, risk assessment, solution design, third-party coordination, and migration execution, moves the financial sector beyond awareness statements and into implementation planning. By naming 2030 to 2032 as a target for critical systems, the roadmap creates a de facto timetable that financial regulators and supervisors across G7 jurisdictions can use to calibrate their own expectations. It is non-prescriptive by design, but its authority as a G7 product gives it considerable weight in standard-setting discussions.
What remains unclear. The roadmap does not specify how financial regulators in individual jurisdictions will incorporate its recommendations into supervisory expectations. Whether the 2030 to 2032 window for critical systems will become a compliance benchmark or remain advisory is an open question. The document also does not address how institutions should handle third-party dependencies on vendors whose PQC migration timelines are slower than their own.
Who should care. Chief information security officers and chief risk officers in banking, insurance, and capital markets. Financial regulators and supervisors, particularly those responsible for operational resilience frameworks. Cryptographic technology vendors serving the financial sector.
European Union: EuroHPC Mandate Formally Expanded to Include Quantum
What happened. On January 16, 2026, the Council of the European Union adopted Council Regulation (EU) 2026/150, amending the EuroHPC Joint Undertaking regulation to add a dedicated quantum technologies pillar. The amendment entered into force on January 20, making EuroHPC responsible for implementing the Union’s quantum technology agenda, including Quantum Flagship activities previously funded through Horizon Europe. A new Quantum Technologies Advisory Group (QTAG) will be established within EuroHPC’s governance structure. The EU financial contribution to the Joint Undertaking totals up to €3 billion, distributed across Horizon Europe, the Digital Europe Programme, and the Connecting Europe Facility, to be matched by participating state contributions.
Why it matters. The consolidation of EU quantum activities under EuroHPC creates a single institutional home for quantum research, development, and infrastructure deployment that previously sat across multiple programs. This addresses a long-standing criticism that EU quantum funding was fragmented across the Quantum Flagship, Digital Europe, and Horizon Europe without sufficient coordination. The move also formally ties quantum to the EU’s supercomputing and AI infrastructure strategy, positioning quantum technologies alongside AI gigafactories in EuroHPC’s expanded remit. For industry and research institutions, this means future quantum technology calls will be integrated into EuroHPC’s work program rather than dispersed across separate instruments.
What remains unclear. How quickly the QTAG will be constituted and how much influence it will exercise over the Multi-Annual Strategic Plan remains to be seen. The relationship between EuroHPC’s quantum pillar and member state national quantum strategies, several of which have their own governance structures, has not been fully articulated. Whether the €3 billion envelope will grow to match the scale of national investments by the United States, China, or the combined spending of EU member states individually is also unresolved.
Who should care. European quantum technology researchers and companies seeking public funding. National quantum program managers in EU member states. Supercomputing centers positioning for hybrid quantum-classical deployments.
United States: NQI Reauthorization Bill Introduced as CISA Issues PQC Procurement Guidance
What happened. On January 8, 2026, a bipartisan group of ten senators introduced S.3597, the National Quantum Initiative Reauthorization Act of 2026, seeking to extend the NQI through December 2034 after the original authorization lapsed in September 2023. Led by Senators Todd Young (R-Ind.) and Maria Cantwell (D-Wash.), the bill would establish up to three new NIST quantum centers, create five new NSF multidisciplinary centers, authorize NASA quantum R&D for the first time, and require the White House to develop an international quantum cooperation strategy. Separately, on January 23, CISA published its initial PQC product categories list, classifying technology products into “Widely Available” and “Transitioning” tiers based on their quantum-resistant capabilities, pursuant to Executive Order 14306.
Why it matters. The NQI Reauthorization Act represents the most serious legislative attempt since 2023 to restore the federal coordination framework that originally organized US quantum policy. Its provisions on supply chain resilience, international cooperation strategy, and NASA inclusion reflect how the policy conversation has matured since the 2018 original. The bill had broad industry endorsements from IBM, Microsoft, Google, IonQ, and others, indicating alignment between the legislative proposal and private-sector priorities. The CISA list, while advisory rather than a procurement mandate (the automatic solicitation trigger from Biden’s EO 14144 was removed by EO 14306), still sends a clear market signal: federal buyers should now default to PQC-capable products in categories where they exist.
What remains unclear. The NQI Reauthorization faces the same congressional dynamics that stalled prior attempts. Whether it can advance through committee and reach a floor vote during the 119th Congress is uncertain, particularly given competing legislative priorities. For the CISA list, the removal of the mandatory procurement trigger means the practical enforcement mechanism is weaker than originally envisioned. How aggressively individual agencies will interpret the advisory guidance in their actual purchasing decisions is not yet apparent. Reports also indicate the White House may be preparing a separate executive order on quantum technology, which could alter the policy terrain before the legislation moves.
Who should care. Federal contractors and technology vendors selling to US government agencies. Quantum technology companies dependent on federal research funding. Congressional staff tracking science and technology authorization. CISOs and procurement officers at federal civilian agencies.
South Korea: Government Targets World-Leading Quantum Chip Production by 2035
What happened. On January 29, 2026, South Korea’s Ministry of Science and ICT unveiled its first comprehensive strategic roadmap for the quantum industry, setting a goal of becoming the world’s top quantum chip producer by 2035. The plan includes training 10,000 specialists, nurturing 2,000 quantum businesses, and designating five “quantum clusters” by July 2026. Samsung Electronics, LG Electronics, and SK Telecom launched a joint quantum technology consultative body alongside the announcement. The government’s 2026 R&D budget for science and ICT was set at approximately $5.6 billion, a 25.4 percent increase year-over-year.
Why it matters. South Korea’s roadmap is one of the most explicitly industrial quantum strategies announced by any government, framing quantum chip production not as a research aspiration but as a manufacturing objective with defined workforce and ecosystem targets. By tying quantum to the country’s existing strengths in semiconductor manufacturing, the strategy attempts to compress development timelines in ways that purely research-oriented programs have not. The five-cluster model echoes semiconductor industrial park strategies that South Korea has used before. Whether the approach can deliver results in a field where manufacturing processes remain immature is the central question, but the scale of the commitment, and the direct involvement of Samsung, LG, and SK Telecom, suggests this is more than a signaling exercise.
What remains unclear. The roadmap’s 2035 target for world-leading quantum chip production is a decade away and rests on technology that has not yet been demonstrated at commercial scale anywhere. How the quantum clusters will be selected and governed, and what specific incentives will attract private-sector co-investment, remains to be detailed. The relationship between South Korea’s roadmap and its homegrown PQC algorithm program (the KpqC competition, which selected four finalist algorithms in January 2025) also has not been publicly articulated as an integrated strategy.
Who should care. Quantum hardware companies and component suppliers with global supply chains. Semiconductor firms exploring quantum-adjacent manufacturing. International quantum programs benchmarking their strategies against peer nations. Workforce development organizations in quantum engineering.
Estonia: PQC Transition Begins Across E-Governance Systems
What happened. The Estonian government awarded Cybernetica three strategic procurements to lead the transition of its e-governance infrastructure to post-quantum cryptography. The projects cover a national PQC transition roadmap, a quantum-risk assessment of the Population Register, and an update to the national cryptographic algorithms report. Affected systems include the ID-card, Mobile-ID, Smart-ID, the X-Road data exchange platform, public e-services, and the Internet voting system. The work aligns with the EU NIS Cooperation Group’s 2030 deadline for high-risk use cases to transition to quantum-resistant cryptography.
Why it matters. Estonia’s digital state architecture is among the most integrated in the world, which makes it both a high-value test case and a high-risk environment for cryptographic migration. The fact that Internet voting, national identity systems, and the X-Road backbone are all in scope means this is not a peripheral upgrade but a wholesale re-engineering of the trust layer underpinning Estonian governance. The three-phase approach (inventory, transition planning, implementation) mirrors the structure recommended by the G7 CEG roadmap released the same month, suggesting convergence in how different jurisdictions are structuring their PQC work. Cybernetica’s involvement also positions a relatively small national company as a potential reference for similar transitions elsewhere.
What remains unclear. The timeline for completing the transition across all affected systems has not been publicly specified beyond the EU’s 2030 target for high-risk use cases. Whether Estonia’s Internet voting system can maintain operational continuity during migration, given the political sensitivity of any disruption, is an open practical question. The procurement also references alignment with the Ministry of Defence’s cryptographic assessment capability program, but the coordination mechanism between civilian and defence tracks has not been detailed.
Who should care. Digital government architects and CISOs in countries with integrated e-governance platforms. EU member state officials responsible for NIS2 compliance. Cryptographic technology providers serving public-sector clients.
Japan and Singapore: First Government-Level Quantum Cooperation Agreement
What happened. On January 9, 2026, Japan and Singapore signed a Memorandum of Cooperation on Quantum Science, Technology, and Innovation. The MOC was signed by Singapore’s Minister for Digital Development and Information, Josephine Teo, and Japan’s Minister of State for Science and Technology Policy, Onoda Kimi. It covers eight areas: quantum research dialogue, academia-private sector interactions, education and talent exchange, security policy dialogue, standards and governance, shared research infrastructure, commercialization, and private funding initiatives. It was Singapore’s first quantum-specific international agreement at the government-to-government level.
Why it matters. The breadth of the eight-area framework goes well beyond standard research cooperation MOUs. The inclusion of security policy dialogue and standards and governance alongside research cooperation signals that both governments view quantum as a domain where diplomatic coordination is necessary, not just desirable. For Singapore, the agreement complements its existing role as the most advanced quantum ecosystem in Southeast Asia. For Japan, it extends a pattern of bilateral technology agreements with trusted partners. The accompanying MOU between Japanese startup Yaqumo and Singapore’s Entropica Labs on fault-tolerant quantum computing suggests the government framework is already producing private-sector activity.
What remains unclear. What specific funding or institutional resources will flow from the MOC is not yet public. Whether the security policy dialogue track will produce concrete coordination on export controls, PQC standards, or supply chain screening remains to be seen. The MOC’s relationship to Japan’s broader bilateral quantum agreements (including with the EU) has not been articulated as part of a single strategic framework.
Who should care. Quantum technology companies in Japan and Singapore seeking cross-border partnerships. ASEAN member states observing Singapore’s bilateral engagement strategy. Standards bodies tracking international convergence on quantum governance.
Also in January 2026
Germany’s BSI updated its Technical Guideline TR-02102-1, raising the general security level to 120 bits and expanding recommended PQC algorithms to include FrodoKEM, Classic McEliece, and ML-KEM for key encapsulation, alongside ML-DSA, SLH-DSA, and hash-based schemes for signatures. Companion updates applied PQC recommendations across TLS, IPsec, and SSH protocols.
Taiwan’s Academia Sinica announced a 20-qubit superconducting quantum computer designed, fabricated, and integrated entirely in-house, extending qubit coherence times from 30 microseconds to 530 microseconds since its 5-qubit predecessor in 2023.
Spain invested €9.75 million in UK-based Nu Quantum to establish a quantum networking subsidiary in Madrid, while UPM and Q*Bird deployed Spain’s first multi-node MDI-QKD network across high-security government sites, and Telefónica joined NATO’s DIANA accelerator with six innovation centers, contributing quantum communications infrastructure.
The ASEAN Digital Masterplan 2030, adopted at the 6th ADGMIN in Hanoi, became the first ASEAN digital masterplan to reference quantum technology, though quantum computing remains a long-term consideration rather than a near-term priority for most member states.
Detailed analysis of each development covered in this briefing, including cross-jurisdictional policy comparisons and sector-level implications, is available to Quantum Policy Radar subscribers.