Apple Disables Advanced Data Protection in UK to Resist Backdoor Mandate

Summary

In a significant move to protect user privacy rather than comply with a UK mandate to introduce backdoors into encrypted data, Apple has announced that it will disable Advanced Data Protection (ADP) in the United Kingdom. The UK revamped its Investigatory Powers Act in 2024, granting itself the authority to compel Apple to break end-to-end encryption. Instead of creating a backdoor, Apple is switching off ADP for new users and will require existing UK users to disable it manually over time.

ADP provides end-to-end encryption for iCloud data, ensuring that only the user can decrypt their data on trusted devices. While this decision means reduced security for certain iCloud services in the UK, such as iCloud Backup, iCloud Drive, Photos, Notes, Reminders, Safari Bookmarks, Siri Shortcuts, Voice Memos, and Wallet passes, other services like iCloud Keychain, Health, iMessage, and FaceTime will remain end-to-end encrypted.

Apple remains committed to offering high levels of security for user data globally and emphasizes that it has never built a backdoor or master key to any of its products or services and will not do so in the future. The changes are effective immediately for new users, and existing users will be provided with instructions on how to disable ADP.