UK Technical Capability Notice splits iCloud Advanced Data Protection access from February 2025
A UK Technical Capability Notice created a permanent encryption split for iCloud Advanced Data Protection. Pre-February 2025 users keep stronger encryption; later users cannot enable it. The split stems directly from Investigatory Powers Act 2016 obligations and affects daily data security for millions of accounts.
The Washington Post reported on 7 February 2025 that UK authorities issued a Technical Capability Notice requiring Apple to retain access capability to iCloud data encrypted under Advanced Data Protection. The notice, authorized under sections of the Investigatory Powers Act 2016, compels maintenance of technical access without public disclosure. Apple responded by closing new ADP enrollments for UK accounts while preserving the feature for prior users, creating an encryption tier split documented in user reports and Apple support pages.
Investigatory Powers Act 2016 records and Judicial Commissioner oversight documents show TCNs must demonstrate technical feasibility and proportionality before approval. Apple’s prior public statements from 2016 and 2021 affirmed no backdoors in iCloud encryption. The resulting policy leaves pre-2025 UK ADP users with 14 additional encrypted data categories including iCloud Photos and Notes while post-2025 users remain on standard server-side encryption accessible via warrant.
Operational impact appears within account migration and device reset flows. UK residents who restore devices or create new Apple IDs after the cutoff lose ADP eligibility without relocation or account jurisdiction change. This produces measurable divergence in data protection levels between otherwise identical device populations, confirmed by Apple’s region-specific feature flags.
Apple has not issued public timelines for restoring parity. Existing ADP users retain the setting unless they disable it, but new activations remain blocked pending resolution of the notice terms.
Home Office: Zero public confirmations or denials of additional TCNs to consumer cloud providers issued before 31 December 2025
Sources (2)
- [1]Washington Post reporting on UK Apple order(https://www.washingtonpost.com/technology/2025/02/07/apple-icloud-uk-encryption/)
- [2]Investigatory Powers Act 2016(https://www.legislation.gov.uk/ukpga/2016/25/contents)