{"format":1,"id":"117-hr-7535","congress":117,"number":"H.R. 7535","kind":"bill","group":"bills","title":"Quantum Computing Cybersecurity Preparedness Act","title_source":"Short Titles as Enacted","official_title":"To encourage the migration of Federal Government information technology systems to quantum-resistant cryptography, and for other purposes.","titles":[{"type":"Official Title as Introduced","title":"To encourage the migration of Federal Government information technology systems to quantum-resistant cryptography, and for other purposes."},{"type":"Short Titles from ENR (Enrolled) bill text","title":"Quantum Computing Cybersecurity Preparedness Act"},{"type":"Short Title(s) from Engrossed Amendment Senate bill text","title":"Quantum Computing Cybersecurity Preparedness Act"},{"type":"Short Titles from RFS (Referred to Senate) bill text","title":"Quantum Computing Cybersecurity Preparedness Act"},{"type":"Display Title","title":"Quantum Computing Cybersecurity Preparedness Act"},{"type":"Short Titles as Enacted","title":"Quantum Computing Cybersecurity Preparedness Act"},{"type":"Short Titles as Passed Senate","title":"Quantum Computing Cybersecurity Preparedness Act"},{"type":"Short Title(s) as Passed House","title":"Quantum Computing Cybersecurity Preparedness Act"},{"type":"Short Title(s) as Introduced","title":"Quantum Computing Cybersecurity Preparedness Act"}],"outcome":"became_law","law_number":"Public Law 117-260","introduced":"2022-04-18","chambers":{"house":{"status":"roll_call","date":"2022-12-13","vote":{"id":"117-2022-h519","question":"On Motion to Suspend the Rules and Concur in the Senate Amendment","title":"Quantum Computing Cybersecurity Preparedness Act","result":"Passed","yea":420,"nay":3,"present":0,"not_voting":7,"source":"https://clerk.house.gov/evs/2022/roll519.xml"}},"senate":{"status":"voice","date":"2022-12-08","vote":null,"how":"unanimous_consent","words":"Passed/agreed to in Senate: Passed Senate with an amendment by Unanimous Consent.(text of amendment in the nature of a substitute: CR S7084-7085)"}},"president":{"status":"signed","date":"2022-12-21"},"vice_president_tie_breaker":null,"latest_action":{"text":"Became Public Law No: 117-260.","date":"2022-12-21"},"nominees":null,"amendments":[],"other_votes":[],"crs_summary":{"date":"2022-12-21","stage":"Public Law","blocks":[{"k":"h","t":"Quantum Computing Cybersecurity Preparedness Act"},{"k":"p","t":"This act addresses the migration of executive agencies' information technology systems to post-quantum cryptography. Post-quantum cryptography is encryption strong enough to resist attacks from quantum computers developed in the future. The act does not apply to national security systems."},{"k":"p","t":"The Office of Management and Budget (OMB) shall issue guidance on the migration of information technology to post-quantum cryptography."},{"k":"p","t":"Each executive agency must maintain an inventory of all information technology in use by the executive agency that is vulnerable to decryption by quantum computers."},{"k":"p","t":"After the National Institutes of Standards and Technology (NIST) has issued post-quantum cryptography standards, the OMB shall issue guidance requiring each executive agency to develop a plan to migrate information technology of the agency to post-quantum cryptography."},{"k":"p","t":"OMB shall submit to Congress a report on"},{"k":"li","t":"a strategy to address the risk posed by the vulnerabilities of information technology of executive agencies to weakened encryption due to the potential and possible capability of a quantum computer to breach such encryption;","d":1},{"k":"li","t":"the funding needed by executive agencies to secure such information technology from the risk posed by an adversary of the United States using a quantum computer to breach the encryption; and","d":1},{"k":"li","t":"a description of federal civilian executive branch coordination efforts led by NIST, including timelines, to develop standards for post-quantum cryptography.","d":1}],"words":218},"summary":{"main_subject":{"text":"Directs the Office of Management and Budget to issue guidance and reports on the migration of federal agencies' information technology to post-quantum cryptography, and requires agencies to inventory technology vulnerable to decryption by quantum computers.","cites":[{"label":"Sec. 4","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#H5CCAFD61798240838D151B1956D6DA16:~:text=4.%20Inventory%20of%20cryptographic%20systems"},{"label":"Sec. 5","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#HF59845BF90F14DF980E309EBDC804158:~:text=5.%20Exemption%20of%20national%20security%20systems"}]},"core_areas":["Agency inventories of information technology vulnerable to quantum decryption","Office of Management and Budget guidance on migration to post-quantum cryptography","Reports to congressional committees on post-quantum cryptography"],"what_it_does":[{"text":"Requires the Director of OMB to issue guidance within 180 days of enactment on migrating information technology to post-quantum cryptography, including a requirement that each agency maintain a current inventory of information technology vulnerable to decryption by quantum computers.","cite":{"label":"Sec. 4","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#H5CCAFD61798240838D151B1956D6DA16:~:text=4.%20Inventory%20of%20cryptographic%20systems"}},{"text":"Requires the head of each agency to provide its inventory and other required information to the Director of OMB, the Director of CISA, and the National Cyber Director within 1 year of enactment and on an ongoing basis afterward.","cite":{"label":"Sec. 4","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#H5CCAFD61798240838D151B1956D6DA16:~:text=4.%20Inventory%20of%20cryptographic%20systems"}},{"text":"Requires the Director of OMB, within 1 year after the Director of NIST issues post-quantum cryptography standards, to issue guidance requiring each agency to prioritize information technology for migration and develop a migration plan.","cite":{"label":"Sec. 4","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#H5CCAFD61798240838D151B1956D6DA16:~:text=4.%20Inventory%20of%20cryptographic%20systems"}},{"text":"Requires the Director of OMB to submit a report within 15 months of enactment to the Senate and House committees covering a strategy for quantum-related encryption risk, an estimate of funding agencies need, and a description of NIST-led standards coordination.","cite":{"label":"Sec. 4","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#H5CCAFD61798240838D151B1956D6DA16:~:text=4.%20Inventory%20of%20cryptographic%20systems"}},{"text":"Requires the Director of OMB to submit reports on agencies' progress in adopting post-quantum cryptography standards, continuing until 5 years after those standards are issued.","cite":{"label":"Sec. 4","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#H5CCAFD61798240838D151B1956D6DA16:~:text=4.%20Inventory%20of%20cryptographic%20systems"}},{"text":"Provides that the Act does not apply to any national security system.","cite":{"label":"Sec. 5","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#HF59845BF90F14DF980E309EBDC804158:~:text=5.%20Exemption%20of%20national%20security%20systems"}}],"unexpected":[{"category":"selective_carve_out","items":[{"cite":{"label":"Sec. 5","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#HF59845BF90F14DF980E309EBDC804158:~:text=5.%20Exemption%20of%20national%20security%20systems"},"heading":"Exemption of national security systems","effect":"Exempts any national security system from all requirements of the Act, so the inventory, migration and reporting requirements do not apply to those systems.","amount":null,"quote":"This Act shall not apply to any national security system.","added_after":true}]}],"version":{"type":"Enrolled Bill","date":null,"rule":"enrolled","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr"},"current":true,"model":"claude-sonnet-5-5","approved":"2026-10-15","approved_by":"checks"},"changes":{"first":{"chamber":"House","type":"Engrossed in House","date":"2022-07-12","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/eh"},"final":{"type":"Enrolled Bill","date":null,"href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr"},"kept":0.52,"replaced":false,"removed":[],"added":[{"cite":{"label":"Sec. 5","href":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text/enr#HF59845BF90F14DF980E309EBDC804158:~:text=5.%20Exemption%20of%20national%20security%20systems"},"heading":"Exemption of national security systems","effect":"States that the Act does not apply to any national security system.","partly":null,"part":null}],"added_count":1,"approved":"2026-10-15","approved_by":"checks"},"sources":{"congress_gov":"https://www.congress.gov/bill/117th-congress/house-bill/7535","text":"https://www.congress.gov/bill/117th-congress/house-bill/7535/text"},"card":{"image":"card/item/117-hr-7535.png","v":"aaa14b918ac1","alt":"Votes on Record. H.R. 7535, 117th Congress: Quantum Computing Cybersecurity Preparedness Act. House: 420 Yea, 3 Nay. Senate: unanimous consent. Outcome: Became law, 21 Dec 2022."}}