Apple Removes iCloud Encryption in the UK Amid Government Pressure
London, Friday, 21 February 2025.
Apple has halted end-to-end encryption for UK iCloud users following government demands, sparking privacy concerns and implications for tech firms operating in similar jurisdictions.
Immediate Impact on UK Users
In a significant policy shift announced on February 20, 2025, Apple has confirmed it will no longer offer Advanced Data Protection (ADP) for iCloud users in the United Kingdom [1]. The change affects both new and existing users, with current UK customers being required to disable this security feature to continue using iCloud services [1]. While certain sensitive data categories including health information, messages, and payment details will maintain their encryption by default [1], other previously protected data types such as photos, notes, and backups will no longer benefit from end-to-end encryption [1].
Security Expert Reactions
The cybersecurity community has responded with concern to this development. Johns Hopkins University cryptography expert Matthew Green has advised users outside the UK to enable ADP immediately as a precautionary measure [1]. The Open Rights Group’s James Baker highlighted the widespread impact, noting that ‘millions of Britons’ have been denied access to this crucial security feature [1]. This represents a significant departure from Apple’s historically strong stance on user privacy, though the company maintains it has ‘never built a backdoor or master key’ to any of its products or services [1].
Implementation Timeline and Global Context
The policy change took effect immediately for new users as of February 20, 2025, at 3 p.m. UK time [1]. Apple has yet to provide specific details about the timeline for existing users to disable ADP, promising further guidance in the near future [1]. This development is particularly significant as it marks a new chapter in the decades-long debate over encryption and law enforcement capabilities [1]. For users outside the United Kingdom, Apple confirms that ADP remains fully operational and unaffected by these changes [1].