Apple has ended its highest level of data security tool for UK customers, confirming that the encryption protecting data stored in iCloud is no longer active. This decision comes after a dispute with the UK government, which had insisted on access to encrypted data stored by Apple users around the world—data that Apple itself couldn’t even access.
As a result, UK authorities can now access customer data held by Apple, provided they have a warrant. The UK Home Office reportedly requested this access under the Investigatory Powers Act (IPA), which requires organizations to supply information to law enforcement agencies.
While the Home Office hasn’t confirmed the request, it previously stated that it doesn’t comment on operational matters, such as confirming or denying any related notices.
Apple’s Advanced Data Protection (ADP) was designed to protect data with end-to-end encryption, ensuring that only the account holder could view sensitive items like photos and documents stored online. Apple, which considers privacy a fundamental right, expressed disappointment over the removal of this feature for UK users. The company reiterated its stance, stating that it has never created a backdoor or master key for any of its products and never will.
Experts in the tech field have raised concerns about the implications of the Investigatory Powers Act. Nick France, CTO of website security company Sectigo, warned that the act’s demand for encryption backdoors and its power to allow or block security patches could harm both security and innovation. He noted that companies may fear losing customer trust and business, which could lead them to move to more privacy-friendly countries. France argued that this could undermine national security and economic growth while also limiting surveillance capabilities.
Alan Woodward, a computer security professor at the University of Surrey, criticized the UK government’s actions, calling it a self-destructive move. He expressed disappointment, saying the government had only weakened online security and privacy for UK users. He also pointed out that it was naïve to believe the UK could dictate global policies to a US tech company.
