Either way, this sucks for Apple users in the UK.
Apple has removed its strongest iCloud data protection for customers in the UK, as a refusal to comply with a government order demanding backdoor access to user data.
Apple has a security feature called Advanced Data Protection, which offers end-to-end data encryption of files and backups stored in iCloud — meaning only the owner can decrypt and access the data. But now, Apple users in the UK are left without this option because of a dispute between the tech giant and their government. According to The Washington Post, the UK government order demanded blanket access to Apple users' encrypted iCloud data.
Instead of complying with the demands, Apple subsequently pulled the Advanced Data Protection tool altogether. "We have never built a backdoor or master key to any of our products or services and we never will," Apple said in a statement to Bloomberg, which first reported the story.
Apple is not complying and building a backdoor, which was the UK order. Instead, they’re removing the optional end to end encryption for iCloud backups, file storage and some other apps. With that encryption off, the government theoretically will have an easier time seeking data…
— Mark Gurman (@markgurman) February 21, 2025
Apple's decision leaves UK users' data more vulnerable, as would have complying with the order. Removing access to their most advanced version of data protection voluntarily is Apple's way of saying they won't participate in granting access to private data for the sake of government oversight. Apple "remains committed to offering our users the highest level of security for their personal data and are hopeful that we will be able to do so in the future in the United Kingdom," the statement continued.
Privacy and free speech advocates have praised the move for not bending to what they believe is an invasive law, which they say could establish a dangerous precedent for any government seeking access private data. "You can’t be tech-friendly while eroding the foundation of cybersecurity on which robust tech depends," said Signal President Meredith Whittaker in a statement to Reuters. "Encryption is not a luxury - it is a fundamental human right essential to a free society that also happens to underpin the global economy."
The data of Apple's UK users is now much less secure. And it's not Apple's fault. In fact, Apple is protecting users by not giving them a false sense of security while being forced to build a backdoor
Encryption is critical to our data-centric world. Govt must stop attacking it. https://t.co/rjCjIXDfdG pic.twitter.com/Y6l5bODmqS— Ari Cohn (@AriCohn) February 21, 2025
But still, the fact that Apple was forced to respond to the UK government in some way has users concerned about their suddenly vulnerable private data. The move has people wondering if its grounds for a breach of contract lawsuit, since privacy protection is a longstanding tent pole of Apple's products and services.
People will be asking if Apple UK has breached it's contract with consumers buying expensive i phones advertising privacy privacy is no longer the case. Could consumers return their phones as breech of contract sighting lack of Data protection ? pic.twitter.com/CqCNDKCf7k
— Joan Anderson (@theblade113) February 21, 2025
Advanced Data Protection, first introduced in 2022, is an optional add-on to Apple's existing cloud data protection. iMessage, passwords, and health data are still end-to-end encrypted by default. Apple told Engadget that users will have a "grace period to comply" with the changes. Mashable has reached out to Apple for more details and will update this story with a response.