Apple is making an unprecedented move by removing its most advanced data security feature, Advanced Data Protection from United Kingdom customers.
This decision follows a demand from the UK government for access to user data stored on Apple’s cloud services.
ADP provides end-to-end encryption, ensuring that only users can access their stored files, including photos and documents. Not even Apple has the ability to decrypt this data.
However, a recent request from the UK government sought access to such information, prompting Apple to take action.
Though Apple has long opposed creating encryption backdoors, warning that doing so would make systems vulnerable to malicious actors, the company has now opted to disable ADP for UK customers entirely.
Moving forward, no UK-based iCloud data will have this enhanced encryption, making it accessible to Apple and, with a warrant, law enforcement.
In a statement, Apple expressed its deep disappointment,”As we have said many times before, we have never built a backdoor or master key to any of our products, and we never will.”
The rollout of this change began at 1500 GMT on Friday, initially affecting new users. Existing users of ADP will also lose access at a later, unspecified date.
The number of UK customers enrolled in ADP since its launch in December 2022 remains unknown.
Cybersecurity expert Prof. Alan Woodward of Surrey University criticized the government’s approach, calling it a misguided decision that weakens online security.
“All the UK government has achieved is to weaken online security and privacy for UK-based users,” he told the BBC.
“It was naïve of the UK government to think they could tell a US technology company what to do globally.”
The UK government’s demand was made under the Investigatory Powers Act which requires companies to provide data to law enforcement agencies when requested.
Neither Apple nor the Home Office commented directly on the notice, though reports from the BBC and The Washington Post confirmed its existence through various sources.
Privacy advocates have strongly opposed the move, calling it an “unprecedented attack” on personal data security.
The issue has even drawn international concern, with two senior US lawmakers warning that such measures could compromise American national security.
They suggested that the US might need to reconsider intelligence-sharing agreements with the UK if the demand is not withdrawn.
Apple acknowledged the gravity of the situation in its statement, stating, “Enhancing the security of cloud storage with end-to-end encryption is more urgent than ever before. Apple remains committed to offering our users the highest level of security for their personal data and are hopeful that we will be able to do so in future in the UK.”
This development comes amid growing resistance in the US against regulatory pressures on its technology sector from foreign governments.
Speaking at the AI Action Summit in Paris earlier this month, US Vice President JD Vance expressed concerns about increasing international scrutiny on American tech firms.
“The Trump administration is troubled by reports that some foreign governments are considering tightening the screws on US tech companies with international footprints,” Vance stated.
As Apple pulls ADP from UK users, the broader implications of this government push for access to encrypted data remain to be seen.
