Securing Europe’s digital future: The EU’s strategy for quantum technologies and post-quantum cryptography

Quantum technologies are rapidly emerging as a potentially transformative force with the power to revolutionise sectors ranging from healthcare and finance to security and defence. Recognising both the opportunities and risks, the EU has set out a comprehensive strategy to position Europe as a global leader in quantum technologies. The recently published European Quantum Technologies Strategy and Implementation Plan outlines the EU’s vision, objectives, and proposed regulatory approach, with a particular focus on fostering a robust quantum industry and addressing the profound implications for cryptography and data security.

What is quantum technology?

Quantum technology harnesses the principles of quantum mechanics – the science that governs the behaviour of matter and energy at the smallest scales. Unlike classical technologies, which rely on predictable, binary states (0 or 1), quantum technologies exploit phenomena such as superposition (where particles can exist in multiple states at once) and entanglement (where particles become linked and affect each other instantly, even at a distance).

Quantum technology is not a single field, but an umbrella term covering several distinct areas:

• Quantum computing: Quantum computers use quantum bits (qubits) that can represent both 0 and 1 simultaneously, enabling them to process complex calculations at speeds unattainable by classical computers. This has the potential to break current cryptographic systems, solve optimisation problems, and simulate molecular interactions for drug discovery.
• Quantum communication: This area focuses on ultra-secure data transmission using quantum key distribution (QKD), which leverages the laws of quantum physics to detect any eavesdropping and ensure the confidentiality of information.
• Quantum sensing: Quantum sensors can measure physical quantities (such as magnetic fields, gravity, or time) with unprecedented precision, opening new possibilities in medical imaging, navigation, and earth observation.

Quantum technology is evolving very rapidly, and it is against this backdrop that the EU has created its strategy for navigating this industry.

The EU strategy report: vision and objectives

The European Quantum Technologies Strategy and Implementation Plan sets out an ambitious vision: to transform Europe into a quantum industrial powerhouse and global market leader. The strategy is built on five interconnected pillars:

1. Research and innovation: Consolidating Europe’s scientific excellence and aligning research efforts across member states to accelerate the transition from laboratory breakthroughs to industrial applications.
2. Quantum infrastructures: Developing sustainable, scalable infrastructure – including quantum computers, communication networks, and sensing platforms – to support research, industry, and public services.
3. Strengthening the quantum ecosystem: Supporting startups and scaleups, securing supply chains, and fostering collaboration between research, industry, and government.
4. Space and dual-use security: Integrating quantum technologies into Europe’s space, security, and defence strategies, recognising their dual-use potential.
5. Quantum skills: Building a diverse, world-class workforce through education, training, and talent mobility programmes.

To address fragmentation and duplication of efforts, the EU proposes a coordinated governance framework, including a dedicated Quantum Act and the extension of the EuroHPC Joint Undertaking to cover all quantum technologies.

Encryption consequences

The most immediate legal and regulatory concern arising from quantum technology is its impact on cryptography. Today’s widely used encryption methods, such as RSA and ECC, rely on the computational difficulty of certain mathematical problems.

Quantum computers, once sufficiently advanced, could solve these problems exponentially faster than classical computers, rendering current encryption methods obsolete. This creates a pressing need for “post-quantum cryptography” – new cryptographic algorithms designed to withstand quantum attacks. The EU strategy recognises this threat and prioritises the transition to quantum-safe cryptographic standards to protect sensitive data for critical infrastructure.

Proposed regulatory regime: focus on cryptography

A central element of the EU’s regulatory approach is the transition to quantum-safe cryptography. The strategy includes:

• Implementation of post-quantum cryptography: The EU and Member States are rolling out a coordinated roadmap for adopting quantum-resistant algorithms, with a focus on protecting critical infrastructure and sensitive data.
• Certification and standardisation: The EU is developing harmonised certification schemes for quantum communication technologies (such as QKD) and supporting the creation of European and international standards for quantum devices and protocols.
• Supply chain security: The EU is conducting risk assessments to identify vulnerabilities in the quantum technology supply chain and is taking steps to ensure strategic autonomy and resilience.
• Legal and policy assignment: The forthcoming Quantum Act will provide a legal framework for the development, deployment, and security of quantum technologies, including export controls and investment screening to prevent technology leakage.

Next steps

A high-level advisory board, comprising eminent European quantum scientists and technology experts – including Nobel Prize laureates in quantum – will offer independent strategic direction for the implementation of the Quantum Europe Strategy.

Subsequently, the Quantum Act proposal is anticipated in 2026, designed to further reinforce the quantum ecosystem and drive industrialisation. This legislation will encourage member states, companies, investors, and researchers to invest in pilot production facilities, supporting these activities within the framework of major EU-wide, national, or regional initiatives.

Conclusion

Quantum technologies represent both a generational opportunity and a significant challenge for legal and regulatory frameworks, particularly in the realm of cryptography and data security. The EU’s strategy is a proactive response, aiming to harness the benefits of quantum innovation while safeguarding Europe’s economic security, technological sovereignty, and fundamental rights. As the quantum era approaches, legal practitioners and policymakers will need to stay abreast of rapid developments, ensuring that regulatory regimes remain fit for purpose in a world where the boundaries of what is possible are being redrawn.

For further information please contact the authors or your usual CMS contact.

This article has been co-authored by Rebecca Webster, trainee solicitor in CMS London.