Apple Drops iCloud’s Advanced Data Protection In UK Following Government Backdoor Order

Apple said, “We are gravely disappointed that protections provided by ADP won't be available to our customers in UK given the continuing rise of data breaches and other threats to customer privacy."

ADP protects iCloud data with end-to-end encryption, which means the data can only be decrypted by the user who owns it, and only on their trusted devices.

Source : Unsplash/Keming Tan

Apple is withdrawing its most advanced encrypted security feature for cloud data in the UK, a major shift that follows a government directive requiring the company to create a backdoor for accessing user information. On Friday, Apple announced that Advanced Data Protection (ADP), an optional feature providing end-to-end encryption for a wide range of user data, will no longer be available to new users in the UK. This technology had previously enhanced the security of iCloud data storage, including device backups, web bookmarks, voice memos, notes, photos, reminders, and text message backups.

Apple in a statement said, “We are gravely disappointed that the protections provided by ADP will not be available to our customers in the UK given the continuing rise of data breaches and other threats to customer privacy. ADP protects iCloud data with end-to-end encryption, which means the data can only be decrypted by the user who owns it, and only on their trusted devices.”

This move comes just two weeks after reports, including those from Bloomberg News, revealed that the UK government had instructed Apple to implement a backdoor for accessing customer data globally. Without ADP, authorities in the UK will find it easier to request user data—raising significant privacy concerns. Additionally, the decision may set a precedent, encouraging other governments to pressure Apple into lowering security measures. A spokesperson for the UK Home Office declined to comment, stating that it does not “confirming or denying the existence of any such notices.”

Apple's Stance On ADP Removal

Apple had previously criticized a bill from the UK Parliament seeking access to user data, calling it an “unprecedented overreach by the government.” At the time, the company warned that “the UK could attempt to secretly veto new user protections globally preventing us from ever offering them to customers.” Existing ADP users will have to manually disable the feature within a specified grace period to retain access to their iCloud accounts.

Apple has assured affected customers that additional guidance will be provided, emphasizing that it does not have the ability to disable the feature on users’ behalf. By choosing to withdraw the encryption feature rather than comply with government demands, Apple is making a clear stand against the order.

“As we have said many times before, we have never built a backdoor or master key to any of our products or services and we never will,” Apple said Friday. “Enhancing the security of cloud storage with end-to-end encryption is more urgent than ever before” the company said, adding that it “remains committed to offering our users the highest level of security for their personal data and are hopeful that we will be able to do so in the future in the United Kingdom.” Users attempting to enable ADP will now see a message on their iPhone, iPad, or Mac stating, “Apple can no longer offer Advanced Data Protection (ADP) in the United Kingdom to new users.” Bloomberg News has also published a guide on how to enable the feature in regions where it is still available.

The removal of ADP in the UK does not affect end-to-end encryption already in place for certain Apple services, including iMessage, FaceTime, password management, and health data. Some industry observers speculated that Apple might consider pulling its services from the UK entirely, but instead, the company has opted to remove the optional security feature as a compromise—at least for now.

Apple has a track record of adjusting its services regionally to continue operating in different markets. For example, iCloud services in China are managed by a local provider, and Apple collaborates with Alibaba Group Holding Ltd. on content filtering to support its AI features in the country. Despite this, the company has long maintained that privacy is a core principle, having previously resisted demands from the U.S. government nearly a decade ago to build a backdoor into iPhone data.

According to Bloomberg News, the UK government’s directive required Apple to provide access to global user data under the country’s Investigatory Powers Act. This law grants officials the power to compel companies to disable encryption through what is known as a “technical capability notice.” Additionally, the legislation prohibits companies from revealing whether they have received such orders.

“Protecting our users' privacy and the security of their data is at the very heart of everything we do at Apple,” the company said in response to the 2023 bill from the UK Parliament that sought access to user data.