Apple has removed its Advanced Data Protection feature for iCloud in the United Kingdom following a secret government order demanding backdoor access to encrypted user data, sparking concerns about privacy rights and setting a precedent for global data security.
On February 21, 2025, Apple withdrew its Advanced Data Protection (ADP) service from the United Kingdom, effectively removing end-to-end encryption for iCloud data in the country.123 This decision came in response to a secret government order issued in January 2025 under the Investigatory Powers Act, which demanded Apple create a backdoor for UK security officials to access encrypted user data globally.45 Rather than complying with the creation of such a backdoor, Apple opted to discontinue the ADP feature entirely in the UK market, maintaining its stance against building encryption backdoors.67
The removal of Advanced Data Protection (ADP) in the UK will have significant consequences for Apple users in the country. Existing ADP users will need to manually disable the feature during an upcoming grace period to maintain their iCloud accounts, as Apple cannot automatically disable it.12 UK customers will lose access to the highest tier of data protection for their iCloud data, including Photos, Notes, Messages backups, and device backups.34 However, some security features will remain intact:
iMessage, FaceTime, Health data, and iCloud Keychain will continue to have end-to-end encryption protection.56
New users in the UK will no longer have the option to enable ADP for their accounts.4
Apple plans to provide guidance to affected users in the coming weeks on how to proceed with their accounts and data protection options.12
The UK government's demand for a backdoor to Apple's encrypted iCloud data was unprecedented in its scope and secrecy. The order, issued through a "technical capability notice" under the Investigatory Powers Act, would have required Apple to create a global backdoor, granting UK security officials access to encrypted user data worldwide12. This demand went beyond typical government requests, as it sought to keep the existence of the backdoor secret from users and would have set a dangerous precedent not previously seen in democratic countries34. The order's far-reaching implications raised significant concerns among privacy advocates and security experts, who warned that such a move could severely compromise global privacy rights and data security53.
The removal of Apple's Advanced Data Protection feature in the UK sparked concern among US lawmakers, who viewed it as a potential threat to global privacy rights and data security. Several prominent members of Congress issued statements condemning the UK government's actions and expressing support for Apple's decision to withdraw the feature rather than create a backdoor1.
Senator Ron Wyden, a long-time advocate for digital privacy, called the UK's demand "a dangerous overreach" and urged the US government to take a firm stance against such measures2.
Representatives from both parties in the House Intelligence Committee expressed worry about the precedent this could set for other countries seeking similar access to encrypted data34.
The incident has reignited debates in Washington about the balance between national security and individual privacy, with some lawmakers pushing for stronger protections for encryption technologies in international agreements5.