In January 2025, the UK government discreetly issued a Technical Capability Notice to Apple, demanding the covert integration of a backdoor into iCloud services—enabling British authorities to decrypt global users’ data when deemed necessary.
Apple employs end-to-end encryption within iCloud to safeguard users’ uploaded data, ensuring that neither Apple nor any third party can access the decrypted contents without explicit user consent. However, it is important to note that this encryption is not enabled by default—users must manually activate a feature known as Advanced Data Protection (ADP) to secure their data in this manner.
Under pressure from the UK government, Apple responded to the notice by disabling the iCloud ADP feature specifically within the United Kingdom. This means that data uploaded by UK users to iCloud is stored in standard form, without the protections afforded by end-to-end encryption, even if users attempt to enable ADP.
Naturally, Apple refused to compromise the privacy and security of its global user base by inserting a backdoor into iCloud. By disabling ADP solely within the UK, the company managed to satisfy the government’s demand without jeopardizing data security in other regions.
Now, it appears the UK government is reconsidering its stance. According to a report by the Financial Times, trade negotiations are currently underway between the United Kingdom and the United States, during which the American government has repeatedly criticized Britain’s insistence on mandated backdoors.
Such backdoors pose a clear threat to the privacy of users worldwide—including American citizens. Consequently, the U.S. government has launched an inquiry into whether the UK’s demand violates the CLOUD Act data agreement, which prohibits the UK from compelling access to data belonging to U.S. citizens, nationals, or lawful permanent residents, and from requiring individuals located within the United States to provide such data.
At present, Apple has not reinstated the iCloud Advanced Data Protection feature for users in the UK. However, with mounting diplomatic pressure and the Financial Times’ report indicating a likely reversal, it is plausible that the UK government will soon withdraw its demand—enabling Apple to once again offer end-to-end encryption to its British users.
Related Posts:
- Data Privacy Row: Apple Takes UK Government to Court
- Apple Halts iCloud Advanced Data Protection in the UK After Government Demands Backdoor Access
- Ransomware Gangs’ New Tactic: Weaponizing Legitimate Entities
- iOS 18.3.2 Bug? iCloud Mail Push Notifications Broken
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.