Alexander Cohen:

The Post reported that UK security officials had issued such a TCN, in secret, in January 2025, requesting that Apple create a way to access encrypted iCloud data belonging not just to UK users, but to Apple users worldwide. The chutzpah of it all was astonishing.

Apple’s position (privately, since they were prohibited from commenting publicly on the reported TCN) showed fidelity to its previous stance: deliberately weakening end-to-end encryption, for whatever purpose or for whomever the intended beneficiary, would make every user less secure. So the dispute became the UK government saying it needed access, Apple saying it couldn’t decrypt the data, and the UK effectively replying: then change the system so that you can.

[…]

Faced with a legal order that would have required it to change the security architecture on which ADP depended, Apple found a third option: stop offering the feature that made this dilemma exist in the first place. It reverted affected UK iCloud data to Standard Data Protection, where Apple does hold the keys and can respond to lawful legal process (except the baseline categories that stay end-to-end encrypted either way). This satisfied the underlying legal requirement without ever building a ‘backdoor’.

Apple said the decision to withdraw ADP in the UK left them “gravely disappointed”. There was, however, an important disclaimer. Apple only stopped allowing new UK users to turn on Advanced Data Protection.

Apple:

For users in the UK who have already enabled Advanced Data Protection, Apple will soon provide additional guidance. Apple cannot disable ADP automatically for these users. Instead, UK users will be given a period of time to disable the feature themselves to keep using their iCloud account.

I wonder whether Apple will actually lock users out of their accounts if they don’t turn off ADP or whether they’ll quietly not enforce it like with Emergency SOS via satellite.

Cohen:

In July 2026, Apple lodged a fresh complaint at the Investigatory Powers Tribunal, which became public the following month. Then, on the 11th of September 2026, U.S. Senator Ron Wyden (a Democrat) and Republican Congressman Warren Davidson called on the UK’s Investigatory Powers Tribunal to open up its proceedings concerning Apple’s encrypted-data dispute.

[…]

On the 17th of September The Daily Telegraph reported that Apple had asked the Investigatory Powers Tribunal to remove restrictions that gag them from confirming the existence of the reported TCN.

Previously:

• UK Again Wants iCloud Backdoor
• UK Online Safety Act
• UK Backing Down on Apple Encryption Backdoor
• Apple Pulls iCloud Advanced Data Protection From UK
• UK Orders Apple to Break iCloud Advanced Data Protection

Apple has filed a legal complaint with the UK’s Investigatory Powers Tribunal seeking to overturn a secret government order requiring the company to enable access to encrypted customer data stored in its cloud services.The challenge, reported in early March 2025, targets a technical capability notice (TCN) issued by the Home Office in January under the Investigatory Powers Act 2016. The notice reportedly directed Apple to create the technical means for UK law enforcement and intelligence agencies to access data protected by the company’s Advanced Data Protection (ADP) feature: an optional end-to-end encryption layer for iCloud backups, photos, notes and other files that even Apple itself cannot normally decrypt, according to Financial Times.

Apple responded by withdrawing ADP for UK users rather than comply, stating that it would not build a “back door” or master key into its products or services. The company has long argued that creating such access points would undermine security for all users and could be exploited by malicious actors. Standard iCloud encryption remains available and is accessible to Apple when presented with a valid legal warrant, but ADP provides a higher level of protection that the firm says it cannot and will not weaken.

The case is understood to be the first major legal test of the Investigatory Powers Act’s provisions allowing authorities to compel technology companies to maintain capabilities to access encrypted material. The tribunal, an independent body that reviews complaints against the UK’s security and intelligence agencies, could quash the notice if it finds the order unlawful. Proceedings were expected to begin relatively quickly, though the government was anticipated to seek restrictions on public disclosure on national security grounds.

The dispute highlights the long-running tension between tech firms’ commitment to strong encryption and governments’ desire for lawful access in cases involving terrorism, serious crime or national security. Privacy advocates have warned that any mandated vulnerability in widely used systems could have global repercussions, while UK authorities maintain that such powers are essential for public safety and are subject to legal safeguards.Apple has consistently maintained that it has never built backdoors into its systems and will not do so. The outcome of the tribunal challenge could set an important precedent for how encryption and government surveillance powers interact under UK law.

MacDailyNews Take: We’ve been fairly clear on this subject for many years:

It’s not enough that every Brit alive has a government camera shoved up their ass 24/7/365? The UK has already slipped far down the slope that they ought to rename the place Airstrip One. – MacDailyNews, November 3, 2015

Those who would give up essential liberty to purchase a little temporary safety deserve neither liberty nor safety. – Benjamin Franklin

The current batshit insane “leadership” of Airstrip One is having yet another crisis of confidence. – MacDailyNews, February 7, 2025

Censorship reflects a society’s lack of confidence in itself. – Potter Stewart

MacDailyNews Note: Apple’s Advanced Data Protection for iCloud is an optional setting that offers Apple’s highest level of cloud data security. If you choose to enable Advanced Data Protection, the majority of your iCloud data — including iCloud Backup, Photos, Notes, and more — is protected using end-to-end encryption. No one else can access your end-to-end encrypted data, not even Apple, and this data remains secure even in the case of a data breach in the cloud.

How to turn on Advanced Data Protection for iCloud

On Mac

1. Choose Apple menu  > System Settings.
2. Click your name, then click iCloud.
3. Click Advanced Data Protection, then click Turn On.
4. Follow the onscreen instructions to review your recovery methods and enable Advanced Data Protection.

On iPhone and iPad

1. Open the Settings app.
2. Tap your name, then tap iCloud.
3. Scroll down, tap Advanced Data Protection, then tap Turn on Advanced Data Protection.
4. Follow the onscreen instructions to review your recovery methods and enable Advanced Data Protection.

More info about Apple’s Advanced Data Protection for iCloud here.

‎
Please help support MacDailyNews — and enjoy subscriber-only articles, comments, chat, and more — by subscribing to our Substack: macdailynews.substack.com. Thank you!

Support MacDailyNews at no extra cost to you by using this link to shop at Amazon.

The post Apple launches legal challenge to UK demand for access to encrypted user data appeared first on MacDailyNews.