Preparing for Q-Day- New Executive Orders Address Quantum Innovation and Post-Quantum Cryptography - The National Law Review

Summarize this article with:
HB Ad Slot HB Mobile Ad Slot Guillermo S. ChristensenEmail+1.202.778.9095Bio and Articles Corey BieberEmail1.312.807.4390Bio and Articles Marne MarottaEmail+1.202.778.9202Bio and Articles Scott J. GelbmanEmail202-778-9067Bio and Articles Find Your Next Job ! Family/Criminal Law Paralegal Account Executive (Legal Lead) Litigation Consultant | Auto | Remote Explore More Job Openings HB Ad Slot Preparing for Q-Day- New Executive Orders Address Quantum Innovation and Post-Quantum Cryptography by: Guillermo S. Christensen, Corey Bieber, Marne Marotta, Scott J. Gelbman, K&L Gates LLP - K&L Gates HUB Friday, June 26, 2026 Related Practices & Jurisdictions Communications Media InternetArtificial Intelligence All Federal Print Mail Download />i On 22 June 2026, President Donald Trump signed two significant executive orders aimed at accelerating quantum-technology innovation while simultaneously preparing federal systems and critical infrastructure for the cybersecurity risks posed by future quantum-computing capabilities. Taken together, the orders signal an update to the National Quantum Strategy (NQS). Rather than treating quantum technology solely as a long-term research initiative, the Administration is pursuing a whole-of-government effort focused on deployment, commercialization, national-security applications, and cyber resilience. The first executive order, “Ushering in the Next Frontier of Quantum Innovation,” establishes the Quantum Computer for Application Development and Discovery Science (QC-ADDS) Effort, a coordinated federal initiative intended to develop and deploy a scientifically useful quantum computer. The second executive order, “Securing the Nation Against Advanced Cryptographic Attacks,” directs federal agencies to accelerate the adoption of post-quantum cryptography (PQC) to protect government systems and sensitive information against future quantum-enabled cyber threats. PQC refers to “cryptographic algorithms or methods that are designed to be resistant to attack by both a quantum computer and a classical computer.” Why This Matters These executive orders identify quantum technology as a strategic policy priority with implications for cybersecurity, government procurement, critical infrastructure, and emerging technology investment. Quantum technology has arrived, and its implications are significant. Both domestic and foreign organizations may soon encounter new federal expectations relating to encryption standards, cybersecurity governance, supply-chain security, technology procurement, and participation in federally funded research initiatives. Companies that begin planning now may be better positioned to address future compliance requirements and capitalize on emerging opportunities. Key Points “Harvest Now, Decrypt Later” is real. Adversaries may be collecting encrypted data today with the expectation that future quantum-computing capabilities could permit decryption of that information years later. It is critical that industry and government alike take notice and secure their infrastructure. Boards of directors and senior management should consider whether quantum readiness should be incorporated into data-governance programs, cybersecurity governance, enterprise risk management, and technology investment planning. Quantum technology is now a strategic national priority comparable to artificial intelligence, advanced semiconductors, and other emerging technologies. Quantum computing has the potential to transform industries including manufacturing, pharmaceuticals, energy, agriculture, logistics, and materials science by enabling solutions to certain computational problems that are difficult or impractical for classical computers. Companies that develop, deploy, procure, or rely upon advanced computing infrastructure should begin evaluating their exposure to quantum-related cybersecurity risks. Preparation is key—this process will take time and cannot occur overnight. Government contractors and entities participating in federally funded research and development programs may encounter new opportunities, funding streams, reporting obligations, and compliance requirements. The “national PQC migration policy” mandates a government-wide transition to quantum-resistant encryption to protect critical infrastructure and sensitive data. Federal agencies are expected to accelerate adoption of quantum-resistant cybersecurity measures and to implement the National Institute of Standards and Technology’s (NIST) approved Federal Information Processing Standards (FIPS) for PQC, potentially influencing requirements for contractors, suppliers, and critical infrastructure operators. Executive Order: Ushering in the Next Frontier of Quantum Innovation The Administration’s quantum-innovation order creates the QC-ADDS initiative, directing multiple federal agencies to coordinate efforts to develop a quantum computer capable of advancing scientific discovery and solving problems beyond the capabilities of classical computing systems. The initiative involves various federal stakeholders and will require a coordinated effort. The order also contemplates expanded development of quantum sensing and quantum-networking technologies, areas critical to national security and economic competitiveness. The executive order further directs agencies to develop technical requirements, coordinate federal investments, and support the establishment of advanced quantum infrastructure. While the timeline for achieving large-scale fault-tolerant quantum computing remains uncertain, the Administration seeks to deploy a quantum computer capable of enabling meaningful scientific breakthroughs by 2028. For companies operating in the quantum ecosystem—including hardware manufacturers, software developers, cloud-service providers, research institutions, and investors—the order signals continued federal support for commercialization and deployment efforts. Executive Order: Securing the Nation Against Advanced Cryptographic Attacks Q-Day—the anticipated date when quantum computers become powerful enough to break public-key encryption—is increasingly predicted to be approaching, although the timing remains uncertain. This reality carries practical significance. PQC is essential to protect our critical infrastructure, financial transactions, and way of life from adversarial cyber-attacks. The order directs federal agencies to accelerate migration toward cryptographic systems designed to withstand attacks from future quantum computers. The Administration has established aggressive timelines for modernizing federal-encryption practices and reducing vulnerabilities associated with quantum-enabled decryption. The order reflects growing concern regarding “harvest now, decrypt later” risks. Under this scenario, threat actors collect encrypted information today with the expectation that future quantum-computing capabilities may eventually allow them to decrypt sensitive data that currently appears secure. Although large-scale quantum computers capable of breaking widely used encryption standards may still be years away, organizations that maintain long-lived sensitive information—including intellectual property, trade secrets, financial data, healthcare information, and classified or export-controlled information—should evaluate whether existing protections will remain adequate over the long term. The executive order also suggests that federal contractors and critical infrastructure operators may face increased expectations regarding quantum readiness and cybersecurity modernization. Notably, the order also directs the Cybersecurity and Infrastructure Security Agency (CISA), in coordination with NIST, to release public guidance on minimum elements for a “cryptographic bill of materials”—a disclosure mechanism intended to enable automated assessment of the cryptographic assets utilized by any hardware or software element. If broadly adopted, this requirement could compel technology vendors and government contractors to document and disclose the cryptographic components embedded in their products, analogous to the software bill of materials frameworks that have gained traction in recent years.
Industry Impacts Government Contractors Federal contractors should anticipate increased scrutiny regarding cybersecurity modernization, encryption practices, supply-chain security, and technology risk management. Future procurement requirements may incorporate PQC standards or quantum-readiness assessments.
Critical Infrastructure Operators Organizations operating in the energy, telecommunications, transportation, financial services, healthcare, and defense sectors may face heightened expectations regarding cyber resilience and adoption of quantum-resistant security measures.
Technology Companies Cloud providers, cybersecurity companies, networking vendors, semiconductor companies, and software developers may encounter increased demand for products and services that support PQC and quantum-secure communications. Research Institutions and Emerging Technology Companies The federal government’s expanded investment in quantum computing, sensing, and networking technologies may create new funding opportunities, public-private partnerships, and commercialization pathways. Boards and Management Teams As quantum risk becomes increasingly connected to enterprise cybersecurity and national security concerns, boards of directors and senior management teams should consider incorporating quantum readiness into broader technology governance and enterprise risk-management frameworks.
Legislative Landscape The executive orders build upon a foundation of bipartisan congressional activity reflecting sustained legislative interest in quantum technology and postquantum cybersecurity.
The Quantum Computing Cybersecurity Preparedness Act (Pub. L. 117-260), signed into law in December 2022, required the Office of Management and Budget (OMB) to prioritize the migration of federal information-technology systems to PQC and directed federal agencies to submit inventories of cryptographic systems vulnerable to quantum-enabled attacks. Separately, the National Quantum Initiative Act (Pub. L. 115-368), originally enacted in 2018 and subsequently reauthorized, established a coordinated federal quantum-research program spanning multiple agencies, including NIST, the US National Science Foundation, and the US Department of Energy, and has provided a framework for sustained federal investment in quantum research and workforce development. Congressional committees have continued to signal interest in additional legislation addressing quantum-workforce development, supply-chain security for quantum technologies, and expanded requirements for critical infrastructure operators to adopt PQC standards. Taken together with the recent executive orders, these legislative efforts underscore that quantum policy is a bipartisan, multibranch priority—and that organizations should anticipate an evolving and increasingly comprehensive federal-regulatory landscape.
Key Deadlines The two executive orders establish a series of implementation deadlines. Organizations monitoring federal quantum policy should take note of the following milestones: Deadline Requirement 30 days Each agency must designate a PQC-migration lead 90 days OMB must issue guidance requiring agencies to review HVA inventories and develop PQC transition plans 180 days NIST must initiate a PQC-migration pilot project (completion by 31 December 2027) 180 days NQS must be updated 180 days FAR Council must publish a proposed rule requiring covered contractors to comply with FIPS/PQC standards by 31 December 2030 270 days CISA must release public guidance on minimum elements for a cryptographic bill of materials 270 days FAR Council must publish a proposed rule on contractor-vulnerability disclosure programs incorporating cryptographic vulnerabilities 31 December 2030 All HVAs and high-impact systems must use PQC for key establishment 31 December 2031 All HVAs and high-impact systems must use PQC for digital signatures Recommended Next Steps Organizations should consider taking proactive steps now, including: Conducting inventories of cryptographic assets and dependencies; Identifying systems containing long-lived sensitive information; Evaluating PQC-migration strategies; Assessing vendor and supply-chain readiness; Monitoring emerging federal-procurement requirements and technical standards; and Incorporating quantum-related risks into cybersecurity governance and enterprise risk-management programs. How K&L Gates Can Help The firm is uniquely positioned to assist clients by navigating the legal, regulatory, cybersecurity, procurement, and national-security implications of emerging quantum technologies. Our multidisciplinary team includes lawyers with experience in the White House, the intelligence community, and the US Department of Justice, having worked on government contracts, cybersecurity and privacy, national security, critical infrastructure, emerging technology, artificial intelligence, telecommunications, and public-policy matters. Our lawyers are actively monitoring developments relating to quantum computing, PQC, federal-procurement requirements, technology regulation, cybersecurity governance, and national-security policy. We assist clients in evaluating emerging compliance obligations, preparing for evolving federal expectations, assessing technology-related risks, and identifying strategic opportunities arising from new government initiatives. As federal agencies begin implementing these executive orders, organizations should expect additional guidance, technical standards, procurement requirements, funding opportunities, and compliance expectations. Companies that begin planning now may be better positioned to manage both the risks and opportunities presented by the next generation of quantum technologies. The firm also assists clients with PQC-transition planning, government contracting requirements, technology transactions, supply-chain risk management, incident preparedness, and engagement with evolving federal-regulatory frameworks. HB Mobile Ad Slot Copyright 2026 K & L Gates HTML Embed Code HB Ad Slot HB Mobile Ad Slot Current Public Notices Post Your Public Notice Today! PUBLIC NOTICE OF UCC ARTICLE 9 SALE: Geo T. Schmidt, Inc.Published: 26 June, 2026 PUBLIC NOTICE OF UCC ARTICLE 9 SALE: Cliff Street Apartments, LLCPublished: 24 June, 2026 PUBLIC NOTICE OF UCC ARTICLE 9 SALE: JGJM 10, LLC, JGJM 12, LLC, JGJM 20, LLC, KANSAS CITY OWNER FINANCE, LLC, AND WACO OWNER FINANCE, LLCPublished: 24 June, 2026 PUBLIC NOTICE OF UCC ARTICLE 9 SALE: ARC Burger, LLCPublished: 24 June, 2026 PUBLIC NOTICE OF RECIEVERSHIP SALE: Maynard Steel Casting CompanyPublished: 22 June, 2026 PUBLIC NOTICE OF UCC SALE: Fulton SCG Member LLCPublished: 22 June, 2026 PUBLIC NOTICE OF ABC SALE: Certain Assets of a Confidential Apparel BusinessPublished: 17 June, 2026 PUBLIC NOTICE OF RECEIVERSHIP SALE: Navarro Farms MO, LLC and Navarro Farms Vandalia, LLCPublished: 16 June, 2026 PUBLIC NOTICE OF RECEIVERSHIP SALE: Premium Alcohol Seltzer Beverage CategoryPublished: 16 June, 2026 PUBLIC NOTICE OF UCC ARTICLE 9 SALE: Madewell Concrete, LLC and Madewell Home Services, Inc.Published: 12 June, 2026 Discover more public notices HB Ad Slot HB Mobile Ad Slot Current Legal Analysis The FAR’s DEI Clause Reaches Federal Leases and Concessions by: Cameron W. Ellis , T.
Scott Kelly Pay Transparency, Non-Competes, Paid Sick Leave + More: Changes for Virginia Employers Start on July 1 by: Kristina H.
Vaquera Beltway Buzz, June 26, 2026 by: James J.
Plunkett Louisiana Enacts Comprehensive Money Transmission Law, Mirroring Laws in Other States by: A.J. S. Dhaliwal , Mehul N. Madia Vermont, The Green Mountain State, Gives Green Light to Comprehensive Privacy Law by: Liisa M. Thomas , Kathryn Smith More from K&L Gates LLP Brussels Regulatory Brief: April/May 2026 by: Francesco Carloni , Nikolaos Peristerakis California's Landmark Textile Recycling Law With Looming 1 July 2026 Deadline by: Maureen O'dea Brill , Caitlin M.
Sarpal Talking Sports Law- A Conversation with Christopher McCleary, Former General Counsel and Chief Operating Officer of the US Olympic & Paralympic Committee [Podcast] by: John S. Wilson , Trevor M.
Gates Environmental Protection Agency Proposes Flexibility for Pre-Permit Construction Under Clean Air Act New Source Review by: Dawn M. Lamparello , Tad J.
Macfarlan No Surprises Act Check-In: The Latest Changes to the IDR Process [Podcast] by: Gabriel T. Scott , Kevin L. Alonso USPTO Director Defines “Exceptional Circumstances” for Director Review—and Terminates Three IPRs by: Jason A. Engel , Erik J. Halverson EPA Advances New PFAS Actions by: Dawn M. Lamparello , Cliff L.
Rothenstein Equal Employment Opportunity Commission Releases Revised National Enforcement Plan for Fiscal Years 2025–2029 by: Erinn L.
Rigney Navigating Nuclear- Updates in New York by: Tison A. Campbell , Julie G. Ezell Australia- An AFS Licensee First- Receiving an Order to Pay AU$2.5 Million for Cybersecurity Failures by: Cameron Abbott , Daniel Knight The “Showgirl” Showdown- What the Taylor Swift Lawsuit Reveals About Creative Expression, Trademarks, and Commercial Identity by: RiKaleigh Omosheyin Victorian Work from Home Bill Introduced by: John Monroe , Michaela Moloney The Expanding False Claims Act: DOJ's New Enforcement Theories and What Federal Contractors Must Know by: Nora E. Becerra , Michael H.
