Security agencies in the United Kingdom have ordered Apple to give them full access to encrypted data on iCloud drives regardless of the data owner’s country of origin or location. Typically, law enforcement orders demanding access to encrypted data pertain to a specific case but the recently revealed order would go much further.
Apple was served by the office of the Home Secretary with a “technical capability notice”. Under the U.K. Investigatory Powers Act of 2016, this authorises law enforcement to compel assistance from companies when needed to collect evidence. While Apple can appeal the notice, they can’t delay compliance pending the appeal.
In other words, they are being ordered to uncork the genie from the privacy bottle. And if they win the appeal, they have to ensure the UK government’s access is revoked and that the UK government has not created some sort of backdoor. It’s important to note that this also impacts Apple’s Advanced Data Protection – an optional security feature Apple added that is designed to protect people who are targeted by cybercriminals or who need extra protection. This includes journalists working against oppressive regimes, in war zones and other people who live and work in places where security risks are heightened.
While Apple is the first target here, encrypted backup and storage services are common. Google and Meta may find themselves next in the firing line (unless they have already received a “technical capability notice” which has not been publicly disclosed or leaked).
Law enforcement, as usual, falls back to its usual argument that end-to-end encryption must not hamper its efforts at catching criminals. Of course, that relies on trust in law enforcement agencies – something that is hard to reconcile given some of these headlines.
Police officer charged after unauthorised access of police database
Australian police, regulators continue unlawfully accessing metadata
Australian Police Routinely Engage in Unauthorised Access of Our Confidential Details
No-one denies that law enforcement agencies need to be equipped to find, apprehend and prosecute criminals. But this must be at a reasonable cost to the public. If police were granted the authority to enter any home, office or private space without warrants, there would be massive public outcry. The UK government is demanding the digital equivalent of what equates to unwarranted access to our digital homes.
Anthony is the founder of Australian Apple News. He is a long-time Apple user and former editor of Australian Macworld. He has contributed to many technology magazines and newspapers as well as appearing regularly on radio and occasionally on TV.
The UK government should told to pull its head in and get lost! How dare they demand access to everything owned by everyone!
I am fine with police, etc. being granted access when there is sufficient evidence that a crime may have been, or is about to be, committed and that access has been approved by a suitably high level court. But open slather on everyone’s data is completely unacceptable!