A high-stakes standoff between the British government and Apple over official access to encrypted cloud backups has escalated to the Investigatory Powers Tribunal in London. Civil liberties groups and the technology giant have mounted legal challenges against the state, targeting both a classified order requiring user data access and the government’s refusal to confirm or deny the existence of such notices on national security grounds.
Tribunal Scrutinises Secrecy Surrounding Surveillance Orders
During a hearing on Thursday, legal representatives for civil rights organisations argued that the government’s reliance on its “neither confirm nor deny” stance hampers open justice and public discussion. Counsel told the tribunal that extensive details concerning the demand are already circulating in the public domain, citing previous statements from American officials, political figures, and reports attributed to unnamed British state sources.
Apple’s legal counsel similarly challenged the official opacity, pointing out that statutory confidentiality limits prevent the company from disclosing the full factual basis of its case. In defence of the posture, government lawyers maintained that departing from the long-standing convention would yield intelligence advantages to foreign adversaries. Disclosing specific operational details, the Crown argued, would help hostile actors ascertain which communications providers are actively subject to technical interception directives.
Diplomatic Fallout and Successive Capability Notices
The dispute originated in January 2025, when the UK issued a technical capability notice directing Apple to provide access to end-to-end encrypted cloud storage. Under domestic surveillance laws, such notices legally mandate service providers to implement technical infrastructure to facilitate government data extraction. That primary demand encompassed Apple accounts across both the UK and the United States, prompting objections that led to months of cross-Atlantic negotiations.
Following discussions with the US administration, British authorities withdrew the initial bilateral notice. A subsequent notice was reportedly served in July 2026, narrowing the scope exclusively to UK-based users, though the government has withheld formal acknowledgement of the revised measure.
Encryption Deadlock Leaves Feature Suspended for UK Customers
Apple has maintained that it possesses no technical means to decrypt records protected under its Advanced Data Protection system. The company has repeatedly warned that engineering deliberate backdoors to satisfy law enforcement creates systemic vulnerabilities that hostile states and malicious hackers can exploit. In response to the initial 2025 demands, Apple withdrew the Advanced Data Protection service for all UK customers rather than build government access mechanisms into its software.
The Investigatory Powers Tribunal will deliver a ruling on the validity of the government’s secrecy policy before proceeding to the substantive legal challenge. A full hearing on the core surveillance order is not expected to convene before next year, leaving unresolved the broader conflict over national security powers, executive transparency, and digital privacy.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
