The UK Home Office is reportedly continuing its pursuit of backdoor access to Apple’s iCloud services, potentially encompassing a wider range of data than previously understood.
A legal filing reviewed by the Financial Times indicates that the Home Office’s request extends beyond data secured by Apple’s Advanced Data Protection (ADP) to include standard iCloud services. This development contradicts claims that the UK had dropped its request following a deal with the US, a statement made recently by President Donald Trump’s Director of National Intelligence Tulsi Gabbard. The legal filing suggests the UK’s request remains active. Neither Apple nor the Home Office have issued public statements regarding these reports.
The US government has reportedly taken a keen interest in the UK’s request, as it could grant access to iCloud data for all users globally, not just British citizens. News of the UK’s request originally surfaced in January. In February, Apple withdrew its ADP security tool for UK iCloud users, expressing “grave disappointment” at having to do so. Apple initiated a legal challenge in March to contest the government’s request.
The Home Office’s request, as outlined in the legal filing, encompasses “categories of data stored within a cloud-based backup service,” potentially including stored passwords and messages, in addition to data protected by ADP. This request is facilitated by the Investigatory Powers Act, often referred to as the “Snooper’s Charter,” which aims to aid law enforcement in investigating serious crimes such as terrorism and child sexual abuse.
Critics argue that compelling Apple to create a backdoor could expose its entire system to exploitation by malicious actors. Oli Buckley, a cybersecurity professor at the University of Loughborough, warned, “Once you open a backdoor, you don’t really have tight control of who walks through it.” He further explained, “The request from the Home Office doesn’t seem to be just asking Apple to leave a spare key out for them. Instead, they are effectively asking them to ensure every house on the street uses the same key.” Buckley emphasized that while such access might be convenient for investigators, it would simultaneously elevate risk levels for all users.
