Apple challenges UK government’s latest demand for iCloud backdoor: report

The UK government does not want a debate about encryption. It wants a backdoor, and it wants it built in silence. That is the only reading of a second "technical capability notice" — a secret legal instrument that compels Apple to dismantle the very encryption it sells as a feature. The first notice died quietly after Washington leaned on London. The second has landed anyway. Apple has dragged the fight into the Investigatory Powers Tribunal, the only court empowered to hear challenges to state surveillance. The fact that this tribunal exists at all tells you everything about the architecture of British oversight: it is a court that meets in secret, rules on secret orders, and answers to no public scrutiny.

Advanced Data Protection is not a marketing flourish. It is the mathematical guarantee that nobody — not Apple, not a hacker, not a government — can read a user's iCloud backup without the user's key. The UK's demand is not for access to a specific suspect's data under a warrant. It is for the technical capability to access everyone's data, forever, at will. That is a backdoor by any honest definition. The government calls it a "technical capability notice" because "backdoor" sounds like what it is: a structural vulnerability introduced on purpose.

Apple's response to the first order was brutal and clarifying. It withdrew ADP from UK customers entirely. British iPhone users now back up to iCloud with standard encryption — readable by Apple, readable by anyone who compromises Apple, readable by the state that demanded the capability. The rest of the world keeps end-to-end encryption. The UK gets a downgrade. That is the price of a government that treats encryption as an obstacle rather than a safeguard.

The first order evaporated under transatlantic pressure. The Trump administration, hardly a civil liberties champion, nevertheless objected to a foreign power mandating a backdoor in an American company's global product. The UK backed down. That retreat revealed the order's true fragility: it could not survive daylight, diplomatic friction, or the prospect of a public row with its closest ally. So the government tried again, in October, behind the same veil of secrecy. It is betting that the second time, the politics will be quieter.

They may be wrong. The Investigatory Powers Tribunal is the only forum where this fight can happen, and its proceedings are classified. But the mere existence of Apple's challenge — reported by the Financial Times, confirmed by the tribunal's docket — pierces the secrecy. The government now has to defend the indefensible in a venue it created, under rules it wrote, against a company that has already demonstrated it will burn a feature to the ground rather than hollow it out.

This is not a UK-only problem. Every democracy that has floated "lawful access" legislation — Australia's Assistance and Access Bill, the EU's Chat Control proposals, the US's EARN IT Act — is watching. If the UK succeeds in compelling a backdoor through secret administrative order, the playbook is written. No debate. No vote. No judicial warrant targeted at a suspect. Just a notice, served in silence, that turns a security feature into a surveillance pipe.

Apple has not commented. It rarely does on active litigation. But its actions speak: it pulled ADP from the UK market rather than weaken it globally. That decision cost it nothing in revenue — ADP is free — but it cost UK users their strongest privacy shield. The government knows this. It proceeded anyway. That tells you the demand is not about investigating crime. It is about establishing precedent: that encryption is a privilege the state can revoke by fiat.

The tribunal will rule in secret. Its judgment will be sealed. The public will learn the outcome only if one side leaks it. That is the design of the Investigatory Powers Act: oversight that cannot be overseen. But the leak has already started. The Financial Times broke the story. The docket is visible to practitioners. The tech press is watching. The government's second gamble assumes the world will look away. It may find that the first fight's collateral damage — a year of UK users living without ADP — has already made the cost of compliance visible, and the cost of resistance credible.

Encryption either works for everyone or it works for no one. The UK government has now twice demanded that Apple make it work for no one, starting with Britons. Apple said no once, at the cost of its own product in a major market. It is saying no again, in the only court that can hear the case. The government's persistence is not strength. It is the stubbornness of a state that has lost the argument but refuses to accept the verdict.