National Law Review argues that the migration window to post-quantum cryptography is now measured in months not decades. NIST released three PQC standards in August 2024 and NIST IR 8547 requires all new national security system acquisitions to use quantum-safe algorithms by January 2027. Harvest-now decrypt-later attacks by state actors make waiting for quantum computers unnecessary before current encrypted data is at risk.