Congress mandates quantum-threat readiness plan to protect U.S. encryption

What it does

This bill requires a federal subcommittee to assess U.S. quantum computing capabilities and cybersecurity vulnerabilities, identify economic sectors at risk, and develop a mitigation plan involving government-private sector collaboration on post-quantum cryptography adoption. It mandates an initial report within one year and annual follow-ups for four years, with recommendations for legislative and non-legislative actions.

Why we flagged it

The bill's core function is to mandate federal assessment and planning for quantum computing threats to encryption security. It is a procedural/informational bill that establishes reporting requirements and inter-agency coordination, not a substantive regulatory or appropriations measure.

What the text implies

• The bill does not appropriate funds or mandate specific spending, but the reporting and coordination requirements may create implicit budget pressure on agencies (NIST, NSF, DHS) to staff the subcommittee and conduct assessments.
• By requiring identification of 'sectors most vulnerable,' the bill may indirectly influence which industries receive federal technical assistance and partnership offers, potentially creating competitive advantage for early-adopting firms.
• The annual reporting requirement for five years creates a sustained federal focus on quantum threats, which may accelerate private-sector investment in post-quantum cryptography but also signal to adversaries the timeline of U.S. readiness.
• The bill references but does not modify the Quantum Computing Cybersecurity Preparedness Act, creating a dependency on that law's definitions and scope; changes to that law could alter this bill's effect without explicit amendment.

Who it affects

The bill addresses a genuine national security and cybersecurity threat (quantum computers' ability to break current encryption) by requiring transparent assessment and coordinated preparedness planning. Citizens benefit from proactive defense of critical infrastructure, financial systems, and personal data security. No direct costs to the public are imposed; the bill is informational and coordinative.

Who stands to gain

• cybersecurity software and hardware vendors
• quantum computing companies
• cryptography research firms
• managed security service providers

Named in the bill

National Quantum Initiative Act, Quantum Computing Cybersecurity Preparedness Act, Subcommittee on the Economic and Security Implications of Quantum Information Science, NIST, NSF, DHS, post-quantum cryptography, cryptographically-relevant quantum computer

Where it stands

4 cosponsors: 3 Republicans, 1 Democrats.

• Aug 8, 2025 — Introduced · Congress.gov: “Introduced in House”
• Aug 8, 2025 — Referred to House Committee on Science, Space, and Technology · Congress.gov: “Referred to the House Committee on Science, Space, and Technology”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

4 lobbying clients named this bill on 7 disclosure filings across 3 quarters, Dec 2025 to Jun 2026. Those filings disclosed $2,120,433 in lobbying spend. A filing names 30 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 72% of bills with at least one filing.

Suhas Subramanyam, the sponsor, reported $356,670 in PAC receipts in the 2026 cycle.

• Greater New York Hospital Association — $1,130,000 on 2 filings
• College of American Pathologists — $640,433 on 3 filings
• Business Software Alliance — $320,000 on 1 filing
• Bsa the Software Alliance (formerly Bsa Business Software Alliance Inc) — $30,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.