Assessing legal exposure from retaining data encrypted with algorithms vulnerable to quantum attack.
For data protection officers, general counsel, and compliance leads. Examines the legal exposure from retaining data protected by cryptography vulnerable to quantum decryption. Covers GDPR Article 32 obligations, harvest-now-decrypt-later liability, sector-specific retention periods, and defensible quantum risk documentation.
Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.
| # | Session | Topics |
|---|---|---|
| 1 | The Harvest Now, Decrypt Later Liability Problem Why data encrypted today creates legal exposure tomorrow | |
| 2 | GDPR Article 32 and the Quantum Security Obligation When "appropriate technical measures" must account for future cryptanalytic capability |
|
| Break | ||
| 3 | Data Retention Obligations Versus Cryptographic Risk Sector-specific retention periods and their quantum exposure windows |
|
| 4 | Interactive Demonstration: Liability Risk Assessment Full-day format only |
|
| Break | ||
| 5 | Documenting Quantum Risk to Manage Liability Building a defensible record of quantum-aware decision-making |
|
| 6 | Mitigation Strategies and Regulatory Engagement Practical steps to reduce exposure before quantum-capable adversaries arrive |
|
| 7 | Q&A and Risk Mitigation Planning | |
Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.
Course design and delivery
QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.
Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.
Contact Us