2 min read
The UK government has reportedly asked Apple to build a backdoor for its encrypted iCloud backups. If approved, this will give security officials access to user data globally, not just for UK users. The order is based on the UK’s Investigatory Powers Act of 2016, also known as the Snoopers’ Charter.
Authorities have demanded full access to end-to-end encrypted iCloud backups, not just to specific user accounts. This includes encrypted files uploaded by any user worldwide. The order, issued last month, came in the form of a technical capability notice. Apple is allegedly not allowed to inform users if their encrypted files are exposed.
By default, iCloud backups aren’t encrypted. Apple launched Advanced Data Protection in 2022. This feature allows users to enable end-to-end encryption for their backups. With it, only users can access their data—not even Apple can retrieve it.
In response to the UK’s order, Apple may remove Advanced Data Protection in the UK. This would comply with the demand locally but wouldn’t solve the broader issue of accessing global user data.
Apple’s Right to Appeal
Apple can appeal the notice by arguing that the demand is either too costly or disproportionate to security needs. However, any appeal won’t delay the enforcement of the original order.
The UK government believes end-to-end encryption helps criminals evade law enforcement. A government spokesperson told The Guardian in 2022, “End-to-end encryption cannot be allowed to hamper efforts to catch perpetrators of the most serious crimes.”
Apple disagrees.
In a 2024 discussion with the UK Parliament, a company representative said, “The UK shouldn’t decide whether global citizens can benefit from the proven security of end-to-end encryption.”
Apple has pushed back against similar efforts in the past, standing firm on protecting user privacy.
The conflict between data privacy and national security is far from over. Apple’s decision will set a precedent for how companies respond to demands for backdoor access in the future.
