Apple has withdrawn its iCloud Advanced Data Protection (ADP) in the UK. The reason: The British government demanded a backdoor for accessing encrypted user data. Apple refused and instead decided to no longer offer the function in the country. This decision has major implications for data protection and digital security. What is particularly controversial is that Apple did not take the measure voluntarily, but rather due to a direct order from the British authorities. But what does this mean for affected users?
Data security is a key issue in the digital world, and Apple is committed to protecting its customers' privacy. The introduction of enhanced iCloud data backup was an important step to better protect user data with end-to-end encryption. The British government apparently sees things differently. It is demanding more access options and is now forcing Apple to make a decision that could have consequences for more than just British users.
Why did Apple disable ADP in the UK?
Apple has been asked by the British government to create a backdoor for encrypted iCloud data with a so-called “Technical Capability Notice” under the Investigatory Powers Act (IPA) (via Bloomberg). This would have meant that the company would have had to give security authorities access to the protected iCloud content not only in the UK but potentially worldwide. Such a weakening of the encryption would be a serious setback for data security and could also be abused by hackers or other states. Apple has decided to remove the function in the UK rather than integrate such a backdoor. This is in line with the company's previous stance, which has been against the installation of access options for authorities for years.
Which data is affected?
Advanced data protection provided protection for a variety of iCloud data, including:
- iCloud backups including messages, photos and notes
- device backups
- iCloud Drive
- Safari bookmarks and history
- health data
- Password management in iCloud Keychain
Since ADP is no longer available in the UK, users can no longer enable this additional layer of security.
What does this mean for British Apple users?
Apple says that users who have already activated the feature will have to deactivate it themselves in order to continue using their iCloud account. Apple cannot perform this step automatically. The company has announced that it will provide affected users with additional instructions. A specific time frame has not yet been given.
Which Apple services remain encrypted in the UK?
Despite the shutdown of ADP, some other Apple services remain protected with end-to-end encryption. These include:
- iMessage
- FaceTime
- health and password data
These services remain secure because their encryption works independently of ADP.
Why does Apple fundamentally reject backdoors?
Apple has been strictly against backdoors in its systems for years. The company argues that every deliberate security gap represents a risk. If a government gains access to encrypted data, there is a risk that this backdoor will sooner or later be discovered and misused by cybercriminals. This is why Apple relies on encryption that not even the company itself can crack. This guarantees the security of user data - at least as long as there are no legal regulations that force Apple to weaken the encryption.
What are the global consequences of the British decision?
The UK's order could have far-reaching consequences. It is causing discussion in the US in particular, where authorities such as the FBI and the NSA are increasingly relying on encryption to protect against Chinese cyberattacks. Apple has stressed in a statement that the need for secure cloud storage is greater today than ever before. The company hopes to be able to reintroduce ADP in the UK at some point. Another critical point: the UK order would have meant that Apple would also have to make data from users outside the UK accessible without the knowledge of the respective governments. In addition, UK law prohibits companies from disclosing the existence of such requests. All of this leads to tension between data protection, state surveillance and international politics.
What should Apple users do now?
If you live in the UK and use ADP, you should check whether you need to disable the feature to continue using your iCloud account. Apple will provide further guidance on this in the coming weeks. For users who are particularly concerned about security, there are a few alternatives:
- Local backups instead of iCloud backups
- Third-party encryption for particularly sensitive data
- Alternative cloud services with stricter data protection policies
The case shows once again how strongly political decisions can influence digital security. Apple is sticking to its line and continuing to focus on data protection - at least wherever it is legally possible. It remains to be seen whether other countries will make similar demands or whether Apple will find a way to bring ADP back to the UK without endangering the security of all users. (Photo by Unsplash+ / Getty Images)
- Apple and EU regulation: Next decision in March
- iPhone production in India stalls – China pulls the strings
- Pegasus on iPhones: Apple only recognizes half of the cases