The future ecosystem for quantum-secure health data

A future quantum computer could be used for both constructive and antagonistic purposes, such as breaking the existing encryption protections currently found in many digital systems and services. We need to find ways to quantum-proof these systems and services, where the health data sector is one of the highest priority areas in need of protection.

This potential threat affects most sectors. How and when we address it is of utmost importance and could provide Sweden and its industry with a competitive advantage. While there is some awareness of this challenge in Sweden, it remains limited, and all stakeholders need a better understanding of how to address it. Preliminary cost estimates for this migration in Sweden amount to at least SEK 50 billion, of which approximately SEK 25 billion is attributed to healthcare, social care, and the pharmaceutical industry. However, the cost of not quantum-proofing our systems could be many times higher.

It is critical to begin this work today; otherwise, the consequences could be unmanageable. A structured, collective effort is necessary to ensure that sector actors can meet legal requirements. Key stakeholders need a national-level speaking partner to guide the process. Since providers cannot tailor solutions for every individual region and customer, standardised solutions and migration paths must be established.

The purpose of this project is to pave the way for a quantum-secure, competitive, and well-functioning healthcare system, as well as a robust medical technology and pharmaceutical industry in Sweden. We work through a use-case-driven approach (addressing various typical systems, conditions, and requirements) in different working groups corresponding to various actor groups within the ecosystem. The goal is to prepare all entities handling health data - public and private, large and small - for the mandatory migration to quantum-secure IT systems.

For each use case, we follow the NIS Cooperation Group (EU) roadmap: inventorying needs and prioritised systems, as well as testing, evaluating, and prototyping the concrete alternatives and solutions identified as relevant. Subsequently, we will identify appropriate migration strategies for each specific case.

We also collaborate with other sectors and countries to share our results, recommendations, and solution models. Our strong hope is that many of the findings will be generic and thus relevant to those sectors as well.

To learn more, read RISE report Future threat, today´s decision (Pdf, in Swedish).