Qstamp / United Kingdom
Regulatory alignment · United Kingdom

United Kingdom obligations for cryptography, data, evidence and public bodies.

The National Cyber Security Centre has published a timeline for post quantum migration, and United Kingdom law sets duties for data protection, record keeping in regulated sectors, electronic evidence and transparency in public procurement. This page maps each to the mechanisms of the Qstamp family.

Cyber security

National Cyber Security Centre guidance.

InstrumentRequirementHow the Qstamp family supports itDates
NCSC post quantum migration timelineDiscovery and planning, migration of priority systems, then completionNIST standardised post quantum algorithms throughoutPlans by 2028, priority systems by 2031, all by 2035
NCSC Cyber Assessment FrameworkData security and security monitoring outcomes for essential servicesTamper evident logs and integrity evidence for critical dataCurrent
Data and evidence

Data protection and electronic evidence.

InstrumentRequirementHow the Qstamp family supports itDates
UK GDPR and the Data Protection Act 2018Data minimisation, data protection by design and security of processingOnly salted commitments leave the organisationIn force
Data (Use and Access) Act 2025Reforms to data protection law and to digital verification servicesVerifiable records without the transfer of personal dataPhased commencement
Electronic Communications Act 2000, section 7Admissibility of electronic signatures in legal proceedingsPost quantum signatures with a published verification procedureIn force
Regulated sectors and public bodies

Financial services, tax and procurement.

InstrumentRequirementHow the Qstamp family supports itDates
FCA Handbook, SYSC 9Orderly records of business and internal organisation, retained and protectedIntegrity evidence for retained recordsIn force
HMRC Making Tax DigitalDigital records and digital links for VAT and income tax reportingQTax filings and invoices sealed when createdPhased from 2019
Procurement Act 2023Transparency notices across the procurement lifecycleQProcure records of each notice and decisionIn force since 24 February 2025
Scope

How to read this page.

Dates and requirements reflect the published position as of October 2026. Qstamp supplies technical evidence of integrity, authorship and time that supports these duties. It does not by itself make any organisation compliant, and each organisation remains responsible for its own obligations.