PQCSA Workshop

Privacy in the Post-Quantum Era: Challenges and Migration Strategies

CPDP 2026 pre-event workshop ― May 19, 2026, Brussels, Belgium


This workshop is co-organized by CryptoExperts and TU/e within the PQCSA project. It will take place at BeCentral in Brussels on May 19, 2026.

A few words

What happens to privacy when today's encrypted data becomes readable tomorrow?

The post-quantum cryptography (PQC) transition is already a privacy challenge. Data being encrypted today may be vulnerable tomorrow through "store now, decrypt later" attacks, putting long-term confidentiality at risk.

This workshop brings the CPDP community into the core of the PQC transition, emphasizing that migration is not only technical but also strategic. Choices on standards, hybrid deployment, and certification will directly affect the confidentiality of data and communications, the unlinkability of users and transactions, and the forward secrecy of encrypted exchanges. Drawing on policy, standardization, and deployment perspectives, the workshop explores the impact of PQC on privacy-sensitive sectors.

Registration is free but mandatory.


Registration

Soon available

Confirmed Speakers

Program (to be confirmed)

Opening Remarks

Program to be announced

Advancement in Cryptographically Relevant Quantum Computers and Shor’s Algorithm for Cryptanalysis

Dahmun Goudarzi, Alice & Bob

For this conference we'll dive into the fascinating world of quantum computing and the evolution of quantum cryptanalysis with Dahmun from the pioneering startup Alice & Bob. Alice & Bob is one of the leading European players in the race to build universal quantum computers - machines capable of executing any type of algorithm with unprecedented power. During this session, Dahmun will introduce the fundamentals of quantum computing, the current evolution of building universal quantum computers, and current state of the art of for Shor's algorithm.

Navigating the governance aspects of the PQC transition

Laima Jančiūtė, Independent researcher

The significance of encryption in exercising the rights to privacy and data protection as well as other civil liberties cannot be overstated. But this technology has even long transcended being a mere technological enabler of human rights: there are ongoing discussions about enshrining a distinct right to encrypt. And in response to the threat that the fast development of quantum computing poses to currently used cryptographic methods, the Spanish Quantum Strategy has formulated and advanced "a new digital right to post-quantum privacy". Due to the multifaceted reliance of the digital society on robust cryptography, numerous governments around the world have embraced the need to mitigate the quantum decryption threat by striving to accomplish the shift to quantum-resistant cryptography within a decade, with some countries having set even more ambitious timelines. But although PQC deployment has already been taking place and a trajectory of PQC becoming a cryptographic standard by default can be observed, at the same time, surveys consistently show the overall low rates of prioritisation of this transition in organisational risk management strategies. To overcome such resistance, a steady stream of governance measures and legal mandates are key. In the EU, which enjoys scientific excellence in the field of cryptography, there is a rich set of regulatory instruments (including the e-Privacy Directive and the GDPR) that are relevant to the PQC transition through their state-of-the-art security requirements and the principles of privacy-by-design and security-by-design. For some time, this process has been also driven by strong policy entrepreneurship stemming from some Member States and at the EU level the PQC policy course was formulated in 2024 when related funding intensified as well. The recent new legislative proposals have stressed increasing urgency of enacting the PQC migration. This talk will offer a deep dive into this landscape, highlighting the need for more streamlined governance approaches to better operationalise this transition, and will address some misconceptions that mislead, at times, PQC migration discussions.

Migration to quantum-safe cryptography: perspective from a personal data protection authority

Matthieu Lequesne, French Data Protection Authority

Matthieu Lequesne is a cryptographer and works as a scientific expert at the technological department at the CNIL. This talk examines the post-quantum transition through the lens of personal data protection and explores how existing data protection mechanisms can be mobilised to accompany the shift toward quantum-safe cryptography.

PQC Migration at Google

Christiane Peters, Google

Google began experimenting with post-quantum cryptography (PQC) in 2016 and is now executing a company-wide rollout with 2029 as the target date. This talk examines the technical and operational hurdles of such an ambitious timeline, including critical dependencies and the realities of implementing PQC at scale. We will also discuss how shifting regulatory requirements and internal lessons are shaping our ongoing migration journey.

End of the workshop

Venue

Workshop Will Be Held At

BeCentral

Cantersteen 12, 1000 Brussels, Belgium

Visit venue website