Apple ordered to open encrypted user accounts globally to UK spying

Apple has reportedly been ordered by the UK government to create a backdoor that would give security officials access to users’ encrypted iCloud backups. If implemented, British security services would have access to the backups of any user worldwide, not just Brits, and Apple would not be permitted to alert users that their encryption was compromised.

The Washington Post reports that the secret order, issued last month, is based on rights given under the UK’s Investigatory Powers Act of 2016, also known as the Snoopers’ Charter. Officials have apparently demanded blanket access to encrypted files uploaded by any user worldwide, rather than access to a specific account.

In response, Apple is expected to simply stop offering its encrypted storage service, Advanced Data Protection, in the UK. This wouldn’t meet the UK’s demand for access to files shared by global users, however.

Apple has the right to appeal the notice on the basis of the cost of implementing it and whether the demand is proportionate to security requirements, but any appeal cannot delay implementation of the original order.

The UK has reportedly served Apple a document called a technical capability notice. It’s a criminal offense to even reveal that the government has made a demand. Similarly, if Apple did cede to the UK’s demands then it apparently would not be allowed to warn users that its encrypted service is no longer fully secure.

“There is no reason why the UK [government] should have the authority to decide for citizens of the world whether they can avail themselves of the proven security benefits that flow from end-to-end encryption,” Apple told the British parliament in March 2024 amidst a discussion of an amendment to the Investigatory Powers Act. It has previously pushed back against other UK attempts to legislate backdoors to encrypted communications.