In a controversial move that could have global ramifications, the United Kingdom has secretly ordered Apple to create a backdoor to its encrypted cloud storage, granting authorities access to all user data worldwide. The demand, issued under the country’s sweeping Investigatory Powers Act of 2016, has raised alarms among privacy advocates and tech companies alike.
According to a report from The Washington Post, sources familiar with the matter revealed that the British government’s order was issued last month and mandates blanket access to all encrypted material stored in Apple’s cloud service. Unlike previous requests that targeted specific accounts under legal authorization, this order is unprecedented in major democracies due to its broad and indiscriminate nature.
Apple’s Potential Response
Rather than compromise its security promises, Apple is expected to discontinue encrypted storage services in the U.K., sources told The Washington Post. However, this move would not satisfy the government’s demand for global access, including data stored in the United States and other countries.
Apple has the option to appeal the directive to a secret technical panel or a judge, but the law does not allow the company to delay compliance during the appeal process. The Home Office has neither confirmed nor denied the existence of such an order, stating that it does not comment on operational matters.
In a prior statement to Parliament, Apple made its position clear: “There is no reason why the U.K. [government] should have the authority to decide for citizens of the world whether they can avail themselves of the proven security benefits that flow from end-to-end encryption.”
U.S. and Global Implications
The demand for backdoor access has drawn scrutiny from senior national security officials in the Biden administration, who have been tracking the issue since Apple first resisted the U.K.’s overtures. While it remains unclear whether U.S. officials have formally objected, a former White House security adviser confirmed the existence of the British order.
The implications of this directive extend beyond Apple. Google, which has encrypted Android backups by default since 2018, and Meta, which provides encrypted backups for WhatsApp, could also face similar pressures. Google has stated that it cannot access encrypted Android backup data, even with a legal order.
Privacy vs. Security Debate
The U.K. and other law enforcement agencies, including the FBI, have long argued that encryption enables criminals to evade detection, particularly in cases involving terrorism and child exploitation. However, privacy advocates and tech companies warn that weakening encryption for one government could open the door for authoritarian regimes to exploit similar vulnerabilities.
Apple has championed user privacy for years, famously refusing to unlock an iPhone tied to the 2015 San Bernardino attack. The company’s previous attempts to balance security concerns with user privacy—such as its controversial plan to scan devices for illegal content—were abandoned after significant backlash from privacy advocates.
If the U.K. succeeds in enforcing this order, it could set a dangerous precedent, encouraging other nations, including China, to demand similar access. This escalating battle between government surveillance and digital privacy could force Apple and other tech giants to make a difficult choice: comply with government demands or withdraw security features from entire markets.
