The UK government has requested that Apple develop a method for officials to access encrypted iCloud backups for British users.
The request, reported by the Financial Times, is intended to support investigations into terrorism and child sexual abuse. Apple has previously opposed similar demands, citing the risk to global user security.
Earlier this year, Apple removed its Advanced Data Protection feature in the UK after publicly challenging government pressure and supporting a legal complaint from privacy groups.
Also: Apple is testing a secret LLM Siri that could finally beat ChatGPT without sacrificing your privacy
Advanced Data Protection uses end-to-end encryption, meaning only users hold the keys. Complying with the UK request would require a structural change to iCloud that could weaken encryption for all users, not just those in the UK.
The technical stakes are clear. Apple’s model differs from Google Drive or OneDrive, which store their own keys and comply with government requests by default.
Forcing Apple to provide access, even in one jurisdiction, could create vulnerabilities affecting iCloud accounts worldwide.
The reaction from users has been immediate. Apple enthusiasts are discussing turning off iCloud, relying on local backups, or switching to fully encrypted alternatives like Proton or Filen.
Some are sharing strategies for protecting data outside of Apple’s ecosystem. The debate is less about principle and more about practical ways to maintain control over personal information.
Apple is navigating a familiar tension: complying with legal requests while maintaining its global reputation for robust encryption.
Government pressure on Apple highlights the challenges of building a security model that resists compromise while serving millions of users. How the company responds will affect both UK customers and the broader trust in iCloud’s encryption.
The UK request also raises a broader question for cloud services. If one government can demand a backdoor, others may follow.
Apple’s resistance sets it apart from other tech companies, but the situation underscores the fragility of digital privacy when legal obligations collide with user security.