Apple’s encryption dispute with the U.K. government is heading back into a legal forum.
The company has challenged the U.K. government’s latest Technical Capability Notice (TCN), which reportedly requires Apple to maintain the capability to provide U.K. authorities with access to encrypted iCloud data upon lawful authorization.
The latest dispute follows an earlier U.K. order that reportedly sought broader access to data protected by Apple’s Advanced Data Protection (ADP) feature. ADP is an optional iCloud setting that extends end-to-end encryption to additional categories of stored data.
That earlier demand drew objections from U.S. officials and privacy advocates, who warned that it could affect the security and privacy of users outside the U.K. Apple subsequently stopped offering Advanced Data Protection to new U.K. users and said existing users would eventually need to disable the feature.
Privacy advocates have described the U.K.’s demands for access to encrypted data as an attempt to create a “backdoor” and have broadly supported Apple’s challenge.
“We are happy to learn that Apple is once again challenging the U.K.’s regime of secret orders,” Privacy International told the BBC.
Apple and the UK frame the dispute differently
Apple has maintained that it has never built — and does not intend to build — any backdoor into its end-to-end encryption service. Apple argues that building such a capability could introduce weaknesses that attackers might later exploit.
According to TechCrunch, Apple said it was “gravely disappointed” that it could no longer offer ADP to U.K. users. The company has not announced whether or under what conditions it might restore the feature in the U.K.
Meanwhile, in a statement, the U.K. government said it supports strong encryption but argued that lawful access may be necessary in investigations involving terrorism and child sexual abuse.
Sir Brian Leveson, the Investigatory Powers Commissioner, said that requests of this kind would only be made “if the Secretary of State deems it necessary and proportionate, and this decision is independently reviewed and approved by a Judicial Commissioner.” He also stressed that the requests would be subject to independent oversight.
Why the case matters beyond Apple
The Guardian reported that privacy advocates are calling for the case to be heard publicly, arguing that the dispute concerns the rights and security of cloud-service users beyond the immediate parties.
For users, the case could affect the level of protection available for data stored in cloud services, particularly as more providers adopt end-to-end encryption. For technology companies, it may help shape how they respond to similar government demands and whether those demands influence product design or feature availability.
The immediate question is whether Apple can overturn or narrow the reported notice. The larger question is whether any government-mandated access mechanism can remain limited and secure once it has been built.
A public hearing could provide rare insight into how the U.K. applies its secret technical-capability powers. Until then, many of the most important details — including the notice’s exact scope — remain based on reporting rather than publicly available documents.
Other News: CrowdStrike warned that AI tools are creating new, underdefended attack surfaces across enterprise environments.