Development of regulation of quantum technologies The OECD experience

In January 2025, the OECD released a¹ Quantum Technologies Policy Primer. Quantum technologies - technologies that use quantum effects (the unique behavior of very small particles at the atomic and subatomic level) to collect, process and transmit² information, including quantum sensors,³ quantum computing, and quantum⁴ communication.

The OECD highlights several benefits of quanta. For example, quantum sensors (such as atomic clocks) can facilitate precise time synchronization (down to microseconds) in highfrequency trading on stock exchanges, allowing to determine the optimal moment of time to buy and sell assets in trades. Quantum random number generator generates secure passwords for online transactions. Quantum communication through encryption increases the security of data⁵ storage in data centers. For example, in London, BT and Toshiba in 2021 launched a data network with quantum protection for the security of financial transactions (joined by⁶ HSBC ). The powerful computing capabilities of quantum computers can reduce the cost of expensive training of new AI models - the cost of training the OpenAI model for the first version of ChatGPT GPT-3 was estimated at $4.6 million, and for the GPT-4 version - more than $100 million.

OECD highlights risks related to quantum development:

1. The threat to internet privacy. A quantum computer can decrypt data faster. For example, the fastest supercomputer can crack RSA-2048 (cryptographic algorithm for data protection) in 300 trillion years, while a quantum computer can do it in a few hours. For the reason that hackers could steal encrypted data now and store it until quantum computers arrive to decrypt it in the future, the UK's National Cyber Security Centre recommends companies to implement quantum-resistant solutions - special methods to protect data from quantum computers.

2. Privacy risks. For example, quantum sensors can track people (see through clothes, buildings, materials), intercept communication signals of devices located at a close distance (which allows obtaining information from bank cards and smartphones). The use of quantum sensors in medicine raises the issue of personal data protection: it is required to obtain “informed consent” from the patient for data collection and use - the patient may not understand what information is collected by highly sensitive quantum sensors.

For the development of quantum technologies, the OECD proposes to develop benchmarks (metrics, benchmarks) to evaluate and compare the capabilities of such technologies (e.g. calculated error rate, computational accuracy, code generation speed, sensitivity of sensors); to develop international standards for the development of the technology. For example, standards of the International Organization for Standardization (ISO) (ISO/IEC 4879:2024 dictionary on quantum computing), International Electrotechnical Commission (IEC), European Telecommunications Standards Institute (ETSI) standards (“Quantum Key Distribution” (QKD)), etc. have already been released.

Russia’s experience

In Russia in 2023, the Concept of regulation of the quantum communications industry (until 2030) was adopted, aimed at creating unified national technical requirements for quantum networks and suppliers of such equipment. Standards defining basic concepts (PNST 830-2023), standards for cryptographic protection of information (PNST 799-2022) and others have been adopted. However, Russia has not solved the problem of assessing security risks and vulnerability to quantum threats at the level of state and public information systems and communication channels (e.g., banking or using blockchain technology), etc. The problem of assessing security risks and vulnerability to quantum threats has not been solved in Russia.

From the monitoring issue No. 1 (13), January 2025. Download the full issue (PDF) · issue page at the Gaidar Institute