In an embarrassing climbdown, the U.K. has, according to the U.S. director of national intelligence Tulsi Gabbard, agreed to drop its demands for access to Apple user data currently protected by encryption.
Earlier this year, it was revealed that the British government was demanding blanket access to users’ end-to-end encrypted iCloud backups – affecting all Apple users worldwide.
The demand, known as a Technical Capability Notice, wouldn’t have allowed the U.K. to directly access the iCloud content itself, but would have required Apple to hand the data over when issued with a legal warrant.
All the same, and understandably, this demand didn’t go down well, with observers lining up to point out that the move would weaken security and privacy for all users. And, earlier this year, Apple challenged the decision via the Investigatory Powers Tribunal, claiming that the U.K. was exceeding its authority.
Meanwhile, it rather pointedly moved to comply with the order, by preventing new users in the U.K. from signing up to its Advanced Data Protection encrypted iCloud storage offering.
Now, though, it appears that the demand has been scrapped.
“Over the past few months, I’ve been working closely with our partners in the UK, alongside @POTUS and @VP, to ensure Americans’ private data remains private and our Constitutional rights and civil liberties are protected,” Gabbard posted on X.
“As a result, the U.K. has agreed to drop its mandate for Apple to provide a ‘back door’ that would have enabled access to the protected encrypted data of American citizens and encroached on our civil liberties.”
A Home Office spokesperson said the government wouldn’t comment on operational matters, including confirming or denying the existence of such a notice.
But she pointed to the long-standing security arrangements between the two countries, saying that they do contain safeguards to protect privacy and sovereignty with, for example, the Data Access Agreement preventing each country from targeting the other’s data.
“We will continue to build on those arrangements and we will also continue to maintain a strong security framework to ensure that we can continue to pursue terrorists and serious criminals operating in the UK,” the spokesperson said. “We will always take all actions necessary at the domestic level to keep UK citizens safe.”
The announcement has been welcomed by privacy campaigners and security experts.
“While the intention of the backdoor was to more easily track criminals and terrorists, it also damaged the privacy and security of all Apple users. Backdoors can’t only be embedded into specific products, or localized for specific governments; such a move would have impacted Apple’s full suite, directly hitting all users while defacing the security of its products,” said Andy McKay, CEO of Converged Communication Solutions.
“Furthermore, with an opportunity to gain access to data stored on all Apple devices, criminals would have worked determinedly to find the backdoor. Eventually they would have succeeded.”
It’s not known whether Apple will now reintroduce its ADP encrypted iCloud storage offering in the U.K.; the company has been approached for comment.
