Apple Files Fresh Challenge to UK Order for Access to Encrypted iCloud Data

Apple has lodged a new complaint with the UK's Investigatory Powers Tribunal, challenging a government order that would give British authorities access to the encrypted iCloud data of UK users. According to reports of the filing, Apple went to the tribunal last month, and the case became public only when the court notified a privacy campaign group that is running its own parallel challenge.

What the order actually demands

The instrument at the centre of the case is a Technical Capability Notice, issued by the Home Office under the Investigatory Powers Act 2016. A notice of that kind can require a company to build the technical means to hand over data that it would otherwise be unable to read, which in Apple's case means the encrypted contents of iCloud accounts.

The current notice is narrower than the one that started this fight. An earlier order was understood to reach the accounts of both British and American customers, and it was withdrawn in 2025 after the dispute became a diplomatic problem between London and Washington. The replacement is limited to the data of UK users.

Neither side can say much about it. Technical Capability Notices carry legal restrictions on disclosure, so Apple and the Home Office are both constrained from discussing the details in public — which is why so much of this case has surfaced through court notifications rather than statements.

Advanced Data Protection is still gone in the UK

The practical consequence for consumers landed well before this filing. Apple pulled Advanced Data Protection for new users in the United Kingdom rather than weaken it, and the company's own UK support note still says it can no longer offer the feature to new users there.

Advanced Data Protection is the opt-in setting that extends end-to-end encryption to the bulk of an iCloud account, including iCloud Backup, iCloud Drive, Photos and Notes. With it switched on, Apple does not hold the keys. Without it, those categories are still encrypted in transit and on Apple's servers, but Apple retains the ability to decrypt them — and can therefore be compelled to produce them.

A smaller set of data stays end-to-end encrypted for everyone regardless of the setting, including Health data and iCloud Keychain passwords.

Where this leaves UK iPhone and Mac owners

• New UK users cannot turn Advanced Data Protection on. The option is not offered on accounts in the UK region.
• The change is regional, not global. Accounts in other countries are unaffected by the current notice, which is limited to UK users' data.
• Nothing about this is retroactive to your device. Data stored locally on an iPhone, iPad or Mac behind a passcode is a separate matter from what sits in iCloud.

If you want to know where your own account stands, open Settings, tap your name, then iCloud, and look under Advanced Data Protection. You can read Apple's own explanation of the UK position on its support page for the change.

What happens next

The tribunal is the body that hears complaints against the UK security services, and it has already shown it is willing to run parts of this dispute in the open rather than entirely in secret. A separate complaint brought by two British civil liberties organisations over the use of these notices is listed for a hearing in December 2026.

No date has been made public for Apple's own new complaint. If the tribunal were to find the notice unlawful, it could quash it — which is the outcome that would put Advanced Data Protection back within reach of British users.

For anyone weighing up how much to trust a single cloud provider with everything, the case is a useful reminder that encryption policy is set by jurisdiction as much as by engineering. It is worth understanding what your cloud storage and backup options actually encrypt, and keeping your devices current with Apple's latest security updates.