Apple takes UK government to tribunal over iCloud encryption demand
Developing story first seen 3 hours ago
Apple has filed a legal complaint at the Investigatory Powers Tribunal (IPT) challenging a fresh UK government demand for "back door" access to encrypted iCloud data, after the Home Office previously abandoned a similar request last year. The company is disputing the government's underlying power to issue such "technical capability notices" (TCNs) under the Investigatory Powers Act, arguing the practice undermines the security of encrypted data and could expose users to bad actors or unintended law enforcement access.
The new TCN, issued after last year's transatlantic row, applies only to British users' data rather than to both UK and US customers as originally demanded. The case, filed last month and first reported by the Financial Times, has been flagged to human rights group Privacy International, which along with Liberty is pursuing a related complaint against TCNs and has asked for proceedings to be held in public; a case management hearing is scheduled for next month. Apple withdrew its Advanced Data Protection encryption tool for UK customers in January 2025 rather than comply with the original order, while neither Apple nor the Home Office can legally comment on the details of TCNs.
- Apple is again challenging a UK order for encrypted iCloud data access.
- New notice targets only British users, unlike the original UK-US demand.
- Privacy International and Liberty are pursuing related complaints against such orders.
New here? Start with this
Apple has taken the UK government to a specialist court, the Investigatory Powers Tribunal, over a demand that it build a way to access encrypted iCloud data. This follows an earlier version of the same demand last year, which caused a public row between the UK and US and led Apple to withdraw its strongest encryption feature, Advanced Data Protection, for UK users rather than comply.
The dispute centres on "technical capability notices", secret orders the government can issue under the Investigatory Powers Act requiring tech firms to be able to hand over data on request, even when that data is encrypted. Apple argues these notices threaten the security of all users' data, since any built-in access point could potentially be exploited by criminals as well as authorities, while the Home Office maintains such powers are needed for law enforcement and security purposes.
Because the details of these notices are legally confidential, much of this case is being fought behind closed doors, though civil liberties groups Privacy International and Liberty are pushing for a related challenge to be heard in public. The outcome could shape how much power UK authorities have over encrypted technology used by millions of people, and how far international tech companies are willing to go to resist such demands.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Advocates of the government's position argue that law enforcement and intelligence agencies have a legitimate and pressing need to access encrypted data when investigating serious crimes such as terrorism, child exploitation and organised crime, and that democratically accountable oversight mechanisms, including judicial and ministerial sign-off under the Investigatory Powers Act, exist precisely to ensure such powers are used proportionately and only when justified. They contend that technology companies should not be able to place data entirely beyond the reach of lawful, warranted investigation simply by adopting end-to-end encryption, and that a narrowly scoped, targeted capability is a reasonable balance between privacy and public safety.
The case against
Apple and its supporters argue that any mechanism enabling government access to encrypted data inherently weakens security for all users, since a back door cannot be built to work only for legitimate authorities and not for hackers, hostile states or criminals who may eventually discover and exploit it. They hold that end-to-end encryption is a fundamental safeguard for privacy, journalism, dissidents and ordinary users' financial and personal safety, and that compelling a company to secretly undermine its own security architecture, without public scrutiny or the ability to disclose what has happened, sets a dangerous precedent that other governments could then demand be extended to their own citizens.
More coverage
Americas Business Companies Entertainment Government Music Politics UK World
Read the full article at the source →
Originally published by The Guardian as “Apple launches legal challenge against UK government demand to access data”.