Technology

Apple and the UK Government Are Fighting Again Over Your Private Data

Martin HollowayPublished 5d ago5 min readBased on 11 sources
Reading level
Apple and the UK Government Are Fighting Again Over Your Private Data
Photo by Joe Ravi (Shutterstock iStock Dreamstime) / CC BY-SA 3.0

Apple has filed a legal complaint against the UK government, challenging a second secret order that demands access to encrypted iCloud data. The dispute has already forced Apple to take away its strongest cloud security feature from UK customers.

The Financial Times first reported Apple's challenge, with TechCrunch confirming the filing on August 3, 2026. Apple has appealed to a body called the Investigatory Powers Tribunal, an independent court that handles complaints about UK government surveillance.

The order is something called a technical capability notice, or TCN. It is a secret legal demand under UK law that forces a company to give the government access to user data, even data that has been scrambled with encryption to keep it private. The UK government issued this second TCN in October 2025, according to Reuters. Apple did not respond to TechCrunch's request for comment.

This is not the first clash between Apple and the UK over encrypted data. The BBC reported that Apple received an earlier TCN sometime between late 2024 and early 2025. The Washington Post reported in February 2025 that UK security officials wanted Apple to create a backdoor, a hidden way around its own encryption, that would let the government retrieve any Apple user's content worldwide, not just in the UK. Apple appealed that order to the Investigatory Powers Tribunal in early 2025, according to Reuters citing the Financial Times.

That first order was eventually dropped. In August 2025, the UK's spy chief publicly admitted the government had backed down on its demand for backdoor access to US Apple customer data, after the Trump administration intervened. Reuters reported in October 2025 that the UK then tried again with a new order, the one Apple is now formally challenging.

The consequences of the first dispute were immediate for UK users. In February 2025, Apple removed the ability of UK customers to turn on Advanced Data Protection, or ADP. ADP is Apple's name for end-to-end encryption on iCloud backups. End-to-end encryption means your data is scrambled so that only you can read it, not even Apple. The Guardian called the move unprecedented. Apple published a support statement saying it was "deeply disappointed that customers in the UK will no longer have the option to enable Advanced Data Protection (ADP)." Since then, UK users' iCloud data has been protected only by standard encryption, which means Apple holds the keys to unlock it and can hand over data when legally required.

Under UK law, Apple can appeal a technical capability notice to a secret technical panel, which weighs factors like whether the demand is technically possible and how much it would cost. The Investigatory Powers Tribunal is a separate court where Apple can challenge government surveillance actions.

The dispute has attracted political attention in both the US and the UK. In February 2026, US lawmakers asked the UK government for a briefing on its backdoor order to Apple. Those lawmakers warned that a backdoor could let cyber criminals and authoritarian governments get at encrypted user data too. This echoes a long-standing argument from security experts: there is no way to build a backdoor that only the right people can use.

The broader context here is that this conflict has no simple fix. The UK's Investigatory Powers Act gives the government legal authority to force companies to help with data access, including building tools to get around encryption. Apple's position, held through two orders and multiple appeals, is that it cannot create a backdoor that law enforcement can use without also creating one that criminals and foreign governments could exploit. These are not two sides that can meet in the middle. They are fundamentally incompatible.

In this author's view, what makes this latest challenge worth watching is the ripple effect. The first order already cost UK users their strongest data protection. If this second order succeeds where the first one failed, the impact would go well beyond Apple. Any company that offers end-to-end encryption to UK customers would face the same legal demands and the same choice: comply, or stop offering the service.

The stakes reach beyond the UK too. The first order demanded access to Apple users' data worldwide, not just within UK borders. US lawmakers have already said they see this as a security and sovereignty issue, not just a British domestic matter. The outcome of Apple's current challenge will be watched by every major technology company, by governments thinking about similar laws, and by security experts who have long argued that forcing companies to build backdoors makes everyone less safe.

For now, the legal process continues behind closed doors. The Investigatory Powers Tribunal has not publicly scheduled hearings. Apple has not commented beyond its earlier support documentation. The UK government does not confirm or deny the existence of specific TCNs. That silence is built into the system these orders operate within.