United Kingdom: Published ICO assessment on preparing for quantum-enabled future including data protection implications

On 9 October 2024, the Information Commissioner’s Office (ICO) issued a report on the rapid progression of quantum technologies and their implications for data protection. The ICO highlighted the significant potential of quantum innovations, such as quantum sensors used in medical research and diagnostics, while stressing the need for safeguarding personal data. Organisations processing sensitive information are advised to adopt post-quantum cryptography (PQC), endorsed by the National Cyber Security Centre, to address the future risks posed by quantum computers, which could eventually compromise current encryption methods. The ICO also emphasised the importance of reviewing at-risk systems and ensuring robust cybersecurity measures, including updated software and strong “cyber hygiene” practices. The ICO is working with partners like the National Quantum Computing Centre and encourages early collaboration with organisations handling personal data. Organisations exploring quantum technologies are invited to engage with the ICO's Emerging Technology team and participate in their Regulatory Sandbox programme.