The UK government has used the Investigatory Powers Act (IPA) to issue Apple with a “technical capability notice” requiring the company create a backdoor into its encrypted cloud services. The Home Office is specifically interested in bypassing the encryption that secure Apple’s Advanced Data Protection (ADP) service.
This cloud service includes a wealth of user data and, thanks to the use of end-to-end encryption, cannot be access by anyone other than the account holder. The UK government demand is part of legislation that forces companies to help law enforcement with investigations, but creating a backdoor would allow a level of access that even Apple does not currently have – and there are concerns about the potential for abuse.
See also:
- Google is the latest tech firm to drop diversity hiring targets following Trump’s executive orders
- Meta may have torrented over 80 terabytes of pirated books to train its AI models
- Microsoft is getting serious about discouraging people from installing Windows 11 on unsupported hardware
The demand – first reported by the Washington Post – was issued secretly, and it has been described as amounting to a request for blanket access to user data. The legislation being used to try to force Apple to comply with the government request for access to encrypted data is also known as the Snooper’s Charter.
Despite originating in the UK, the blanket nature of the data access request means that Apple customers around the globe would be affected. But how likely is Apple to comply with the demand, especially given the company’s view that privacy is a “fundamental human right”?
While the company has not commented specifically on this latest request, it has previously spoken out against breaking encryption in this way saying it would “never build a backdoor”. Apple has also said that it would go as far as withdrawing “critical safety features” from the UK rather than comprise user safety and privacy. This seems like the most likely outcome.
There are, of course, numerous risks to the unprecedented introduction of an encryption-breaking backdoor, including the possibility of it being abused by bad actors or malicious government.
