The ongoing battle between Apple and the UK government over encrypted data access has taken a major turn, with Apple officially removing its encrypted Advanced Data Protection (ADP) backup feature for UK users. The move follows a demand under the Investigatory Powers Act 2016 (IPA), which required Apple to create a backdoor allowing law enforcement access to encrypted iCloud backups.
This development has sparked intense debate over privacy, cybersecurity, and government surveillance, with critics warning that it could set a dangerous precedent for tech companies worldwide.
What’s Happening?
In early February 2025, reports emerged that the UK government had issued a technical capability notice (TCN) to Apple, compelling the company to create a means for authorities to access end-to-end encrypted iCloud data. The demand was made under the IPA, often called the "Snooper’s Charter", which grants the UK government broad surveillance powers over digital communications.
Apple, which has long positioned itself as a champion of user privacy, refused to create a backdoor. Instead, the company has opted to withdraw its ADP feature for UK users entirely.
As of February 21, 2025:
New UK users will no longer be able to enable Advanced Data Protection for iCloud backups.
Existing users will receive notifications instructing them to disable the feature.
Other Apple encryption services (such as iMessage and iCloud Keychain) will remain unchanged—for now.
The UK government maintains that the move is necessary to combat terrorism, organized crime, and child exploitation, arguing that encryption prevents law enforcement from obtaining vital evidence. Apple, however, has countered that weakening encryption for one government inevitably weakens security for all users worldwide.
Why Did Apple Remove ADP in the UK?
Apple’s decision appears to be a direct response to the UK’s legal framework, which requires companies to comply with surveillance orders in secret. Under the IPA, tech companies are forbidden from revealing whether they have received a request for backdoor access.
In previous cases, Apple has resisted similar demands, even threatening to withdraw services like iMessage and FaceTime from the UK market if forced to weaken encryption. While the UK government later backed down on that demand, it has stood firm on iCloud backups, leading Apple to take the drastic step of disabling ADP entirely.
Apple’s response suggests that it was unable to legally challenge the request or that it faced potential penalties for noncompliance. By pulling the feature, Apple avoids directly compromising its encryption while still operating within UK law.
The Risks of Weakening Encryption
Privacy advocates and cybersecurity experts have condemned the UK’s approach, warning that it sets a dangerous precedent for governments worldwide. Key concerns include:
A backdoor for one government is a backdoor for everyone – If Apple had complied, other governments—including those with weaker human rights protections—could demand similar access.
Increased cybercrime risk – Encryption protects individuals, businesses, and even national security infrastructure. Weakening it could expose sensitive personal and corporate data to hackers.
Surveillance creep – The IPA allows the UK government to expand its surveillance powers over time. Once access to encrypted backups is granted, the next step could be real-time access to messaging and calls.
Erosion of digital privacy globally – If other nations follow suit, Apple and other tech companies could face mounting pressure to create backdoors in their encryption systems, fundamentally altering the digital privacy landscape.
Could Other Tech Companies Be Next?
The UK's success in pressuring Apple may embolden governments to target other tech giants. Companies that could face similar demands include:
Google (Android backups, Google Drive encryption)
Microsoft (OneDrive, Windows security features)
Meta (WhatsApp, Messenger encryption)
Encrypted messaging services (Signal, Telegram, ProtonMail)
If this trend continues, we may see a global shift where governments increasingly demand access to encrypted data, leaving users with fewer secure digital options.
What Happens Next?
For now, UK Apple users will no longer have access to fully encrypted iCloud backups. However, Apple’s decision to pull the feature instead of complying suggests that it may continue to push back against government demands for broader access to user data.
Meanwhile, the debate over encryption, surveillance, and the limits of government power is far from over. Privacy advocates warn that the UK's approach could lead to increased state surveillance and weakened digital protections worldwide.
As governments and tech companies continue to clash over these issues, one thing is clear: the fight over encryption is only just beginning.
