Two-Tier Encryption in the UK
The Post reported that UK security officials had issued such a TCN, in secret, in January 2025, requesting that Apple create a way to access encrypted iCloud data belonging not just to UK users, but to Apple users worldwide. The chutzpah of it all was astonishing.
Apple’s position (privately, since they were prohibited from commenting publicly on the reported TCN) showed fidelity to its previous stance: deliberately weakening end-to-end encryption, for whatever purpose or for whomever the intended beneficiary, would make every user less secure. So the dispute became the UK government saying it needed access, Apple saying it couldn’t decrypt the data, and the UK effectively replying: then change the system so that you can.
[…]
Faced with a legal order that would have required it to change the security architecture on which ADP depended, Apple found a third option: stop offering the feature that made this dilemma exist in the first place. It reverted affected UK iCloud data to Standard Data Protection, where Apple does hold the keys and can respond to lawful legal process (except the baseline categories that stay end-to-end encrypted either way). This satisfied the underlying legal requirement without ever building a ‘backdoor’.
Apple said the decision to withdraw ADP in the UK left them “gravely disappointed”. There was, however, an important disclaimer. Apple only stopped allowing new UK users to turn on Advanced Data Protection.
For users in the UK who have already enabled Advanced Data Protection, Apple will soon provide additional guidance. Apple cannot disable ADP automatically for these users. Instead, UK users will be given a period of time to disable the feature themselves to keep using their iCloud account.
I wonder whether Apple will actually lock users out of their accounts if they don’t turn off ADP or whether they’ll quietly not enforce it like with Emergency SOS via satellite.
In July 2026, Apple lodged a fresh complaint at the Investigatory Powers Tribunal, which became public the following month. Then, on the 11th of September 2026, U.S. Senator Ron Wyden (a Democrat) and Republican Congressman Warren Davidson called on the UK’s Investigatory Powers Tribunal to open up its proceedings concerning Apple’s encrypted-data dispute.
[…]
On the 17th of September The Daily Telegraph reported that Apple had asked the Investigatory Powers Tribunal to remove restrictions that gag them from confirming the existence of the reported TCN.
Previously:
- UK Again Wants iCloud Backdoor
- UK Online Safety Act
- UK Backing Down on Apple Encryption Backdoor
- Apple Pulls iCloud Advanced Data Protection From UK
- UK Orders Apple to Break iCloud Advanced Data Protection
