{
  "bindingLevels": {
    "mandatory": "Mandatory",
    "guidance": "Guidance",
    "target": "Stated target",
    "none": "No date set"
  },
  "sectors": {
    "government": "Government",
    "defence": "Defence",
    "finance": "Finance"
  },
  "milestoneTypes": {
    "plan": "Plan, inventory or report",
    "procure": "Procurement requirement",
    "priority": "Priority systems migrated",
    "all": "Migration complete",
    "deprecate": "Deprecated",
    "disallow": "Disallowed or ceased"
  },
  "jurisdictions": [
    {
      "name": "US federal civilian",
      "source": "eo-14412",
      "sector": "government",
      "binding": "mandatory",
      "milestones": [
        {
          "type": "plan",
          "label": "Agency migration plans to OMB",
          "due": 2026.83,
          "starts": 2026.5,
          "asPublished": "late October 2026",
          "source": "omb-m-26-15"
        },
        {
          "type": "priority",
          "label": "PQC key establishment for high value assets",
          "due": 2031,
          "asPublished": "31 Dec 2030"
        },
        {
          "type": "priority",
          "label": "PQC signatures for high value assets",
          "due": 2032,
          "asPublished": "31 Dec 2031"
        },
        {
          "type": "all",
          "label": "Remaining systems",
          "due": 2036,
          "asPublished": "2035",
          "source": "omb-m-26-15"
        }
      ]
    },
    {
      "name": "US federal contractors",
      "source": "eo-14412",
      "sector": "government",
      "binding": "mandatory",
      "qualification": "FAR rule proposed, not yet final",
      "milestones": [
        {
          "type": "procure",
          "label": "FIPS compliance including PQC, via a FAR rule not yet final",
          "due": 2031,
          "asPublished": "31 Dec 2030"
        }
      ]
    },
    {
      "name": "US defense (DoW)",
      "source": "dow",
      "sector": "defence",
      "binding": "mandatory",
      "milestones": [
        {
          "type": "priority",
          "label": "Every system supports PQC or is phased out",
          "due": 2031,
          "asPublished": "end of 2030"
        },
        {
          "type": "all",
          "label": "Every system uses PQC",
          "due": 2032,
          "asPublished": "end of 2031"
        }
      ]
    },
    {
      "name": "US national security systems",
      "source": "cnsa-2",
      "sector": "defence",
      "binding": "mandatory",
      "milestones": [
        {
          "type": "procure",
          "label": "New acquisitions must support CNSA 2.0",
          "due": 2027,
          "asPublished": "1 Jan 2027"
        },
        {
          "type": "priority",
          "label": "Networking gear and firmware signing exclusive",
          "due": 2031,
          "asPublished": "2030"
        },
        {
          "type": "priority",
          "label": "Most categories exclusive",
          "due": 2034,
          "asPublished": "2033"
        },
        {
          "type": "all",
          "label": "All NSS quantum-resistant",
          "due": 2036,
          "asPublished": "2035"
        }
      ]
    },
    {
      "name": "NIST algorithm lifecycle",
      "source": "nist-ir-8547",
      "sector": "government",
      "binding": "guidance",
      "draft": true,
      "milestones": [
        {
          "type": "deprecate",
          "label": "112-bit quantum-vulnerable algorithms deprecated",
          "due": 2031,
          "asPublished": "after 2030"
        },
        {
          "type": "disallow",
          "label": "Quantum-vulnerable algorithms disallowed",
          "due": 2036,
          "asPublished": "after 2035"
        }
      ]
    },
    {
      "name": "European Union",
      "source": "eu-niscg",
      "sector": "government",
      "binding": "guidance",
      "milestones": [
        {
          "type": "plan",
          "label": "National roadmaps and first steps",
          "due": 2027,
          "starts": 2025.5,
          "asPublished": "end of 2026"
        },
        {
          "type": "priority",
          "label": "High-risk use cases migrated",
          "due": 2031,
          "starts": 2027,
          "asPublished": "end of 2030"
        },
        {
          "type": "all",
          "label": "Migration complete as far as feasible",
          "due": 2036,
          "starts": 2031,
          "asPublished": "end of 2035"
        }
      ]
    },
    {
      "name": "Germany, France and partners",
      "source": "eu-joint",
      "sector": "government",
      "binding": "guidance",
      "milestones": [
        {
          "type": "priority",
          "label": "Latest date for prioritized transitions",
          "due": 2031,
          "asPublished": "end of 2030"
        }
      ]
    },
    {
      "name": "Germany (BSI)",
      "source": "bsi-2026",
      "sector": "government",
      "binding": "guidance",
      "milestones": [
        {
          "type": "priority",
          "label": "Applications with very high protection requirements move to quantum-safe key agreement",
          "due": 2031,
          "asPublished": "end of 2030"
        },
        {
          "type": "disallow",
          "label": "Classical key agreement alone no longer recommended; hybrid with a post-quantum KEM only",
          "due": 2032,
          "asPublished": "end of 2031"
        },
        {
          "type": "disallow",
          "label": "Classical signatures no longer recommended",
          "due": 2036,
          "asPublished": "end of 2035"
        }
      ]
    },
    {
      "name": "Switzerland (FINMA, finance)",
      "source": "finma",
      "sector": "finance",
      "binding": "guidance",
      "milestones": [
        {
          "type": "plan",
          "label": "Supervised institutions have PQC roadmaps",
          "due": 2027.5,
          "asPublished": "mid-2027"
        }
      ]
    },
    {
      "name": "United Kingdom",
      "source": "ncsc",
      "sector": "government",
      "binding": "guidance",
      "milestones": [
        {
          "type": "plan",
          "label": "Discovery, assessment and initial migration plan",
          "due": 2028.99,
          "starts": 2025.5,
          "asPublished": "by 2028"
        },
        {
          "type": "priority",
          "label": "Highest-priority migration activities",
          "due": 2031.99,
          "starts": 2028.99,
          "asPublished": "2028 to 2031"
        },
        {
          "type": "all",
          "label": "Migration complete for all systems, services and products",
          "due": 2035.99,
          "starts": 2031.99,
          "asPublished": "2031 to 2035"
        }
      ]
    },
    {
      "name": "Canada (federal)",
      "source": "cccs",
      "sector": "government",
      "binding": "mandatory",
      "milestones": [
        {
          "type": "plan",
          "label": "Departmental migration plans, then annual reports",
          "due": 2026.3,
          "asPublished": "April 2026"
        },
        {
          "type": "priority",
          "label": "High-priority systems migrated",
          "due": 2032,
          "starts": 2026.3,
          "asPublished": "end of 2031"
        },
        {
          "type": "all",
          "label": "Remaining systems migrated",
          "due": 2036,
          "starts": 2032,
          "asPublished": "end of 2035"
        }
      ]
    },
    {
      "name": "Australia",
      "source": "asd",
      "sector": "government",
      "binding": "guidance",
      "milestones": [
        {
          "type": "plan",
          "label": "Refined transition plan",
          "due": 2027,
          "asPublished": "end of 2026"
        },
        {
          "type": "priority",
          "label": "Begin with the most critical systems",
          "due": 2029,
          "asPublished": "end of 2028",
          "verification": "secondary"
        },
        {
          "type": "disallow",
          "label": "Traditional asymmetric cryptography ceased",
          "due": 2031,
          "asPublished": "end of 2030"
        }
      ]
    },
    {
      "name": "Japan (government)",
      "source": "jp-nco",
      "sector": "government",
      "binding": "target",
      "milestones": [
        {
          "type": "plan",
          "label": "National migration roadmap expected",
          "due": 2028,
          "asPublished": "2027",
          "source": "ec-country"
        },
        {
          "type": "all",
          "label": "Government agencies complete transition",
          "due": 2035.99,
          "asPublished": "2035"
        }
      ]
    },
    {
      "name": "South Korea",
      "source": "kr-plan",
      "sector": "government",
      "binding": "target",
      "milestones": [
        {
          "type": "procure",
          "label": "Public-sector rollout of KpqC algorithms begins",
          "due": 2026.5,
          "asPublished": "2026",
          "source": "ec-country"
        },
        {
          "type": "all",
          "label": "National transition",
          "due": 2035.99,
          "asPublished": "2035"
        }
      ]
    },
    {
      "name": "India",
      "source": "dst-india",
      "sector": "government",
      "binding": "target",
      "milestones": [
        {
          "type": "plan",
          "label": "Critical information infrastructure completes inventory, governance and pilots",
          "due": 2028,
          "starts": 2026.2,
          "asPublished": "2027"
        },
        {
          "type": "plan",
          "label": "CII begins full migration; other enterprises complete foundations",
          "due": 2029,
          "asPublished": "2028"
        },
        {
          "type": "priority",
          "label": "High-priority CII systems migrated",
          "due": 2031,
          "asPublished": "2030"
        },
        {
          "type": "all",
          "label": "PQC the default across communication systems",
          "due": 2034,
          "asPublished": "2033"
        }
      ]
    },
    {
      "name": "Singapore (MAS, finance)",
      "source": "mas-2026",
      "sector": "finance",
      "binding": "guidance",
      "milestones": [
        {
          "type": "priority",
          "label": "Financial institutions quantum-resilient",
          "due": 2031,
          "asPublished": "end of the decade"
        }
      ]
    },
    {
      "name": "Hong Kong (HKMA, banks)",
      "source": "hkma",
      "sector": "finance",
      "binding": "target",
      "milestones": [
        {
          "type": "priority",
          "label": "Banks reach full marks on the Quantum Preparedness Index (2.3 of 10 in 2026)",
          "due": 2031,
          "starts": 2026.6,
          "asPublished": "2030"
        }
      ]
    },
    {
      "name": "Israel (Bank of Israel)",
      "source": "boi",
      "sector": "finance",
      "binding": "mandatory",
      "milestones": [
        {
          "type": "plan",
          "label": "Banks and payment providers submit quantum preparedness plans",
          "due": 2026.2,
          "asPublished": "early 2026"
        }
      ]
    },
    {
      "name": "United Arab Emirates",
      "source": "uae",
      "sector": "government",
      "binding": "mandatory",
      "milestones": [
        {
          "type": "plan",
          "label": "Compliance-critical government entities formalize migration plans",
          "due": 2027,
          "asPublished": "2026",
          "source": "ec-country"
        }
      ]
    },
    {
      "name": "China (NGCC standardisation)",
      "source": "cn-round1",
      "sector": "government",
      "binding": "none",
      "note": "Own algorithm programme, round 1 candidates published Sept 2026; no migration deadline",
      "milestones": [
        {
          "type": "plan",
          "label": "NGCC submission deadline for public-key algorithms",
          "due": 2026.5,
          "asPublished": "30 June 2026",
          "source": "cn-ngcc-pk"
        },
        {
          "type": "plan",
          "label": "Round 1 candidates published, 84 public-key and 35 hash algorithms",
          "due": 2026.72,
          "asPublished": "September 2026"
        }
      ]
    },
    {
      "name": "New Zealand",
      "source": "nz",
      "sector": "government",
      "binding": "none",
      "note": "No migration deadline set; follows NIST publication",
      "milestones": []
    },
    {
      "name": "G7 financial sector",
      "source": "g7-ceg",
      "sector": "finance",
      "binding": "target",
      "milestones": [
        {
          "type": "priority",
          "label": "Critical systems may transition",
          "due": 2033,
          "starts": 2031,
          "asPublished": "2030 to 2032"
        },
        {
          "type": "all",
          "label": "Sector-wide migration target",
          "due": 2035.99,
          "asPublished": "2035"
        }
      ]
    }
  ]
}