PRESS RELEASE: United Kingdom goes after Apple’s encrypted data

PI has long campaigned against the use and proliferation of such disproportionate government powers. If the UK succeeds in this misguided attempt to access encrypted data, it may set a damaging precedent and encourage abusive regimes around the world to take similar actions.

Key points

Privacy International is alarmed that the United Kingdom have used an unfettered power that undermines every Apple users’ privacy and security globally.
This latest overreach threatens everyone’s data and the security of the Internet as a whole, not just Apple’s customers.
PI believes this an "unprecedented attack on individuals’ private data around the globe is disproportionate and unnecessary."

Press release

Post date

7th February 2025

Privacy International (PI)

FOR IMMEDIATE RELEASE

United Kingdom goes after Apple's encrypted data

The United Kingdom has used its investigatory powers to force disclosure of private data held by Apple Inc.

"The United Kingdom's unprecedented attack on individuals' private data around the globe is disproportionate and unnecessary."
"This is a fight the UK should not have picked. The reported details suggest the UK is seeking the ability to access encrypted information Apple users store on iCloud, no matter their location. This overreach sets a hugely damaging precedent and will embolden abusive regimes the world over." - Privacy International's Legal Director, Caroline Wilson Palow

LONDON – 7 February 2025

PI is alarmed that the United Kingdom have used an unfettered power that undermines every Apple users' privacy and security globally.

We will be taking a very close interest in this latest overreach that threatens everyone's data and the security of the Internet as a whole, not just Apple's customers.

The UK is currently amending its Investigatory Powers Regime by, in PI's opinon, watering down the already inadequate protections for individuals' freedoms. We have been pushing for greater transparency into the process, specifically in relation to Technical Capability and National Security Notices.

"The UK Government has apparently decided to pull the trigger on one of its most intrusive and potentially damaging surveillance powers - its ability to force companies to remove security and privacy protections for their users worldwide. As it has long threatened, the UK has finally moved against Apple in an attempt to undermine end-to-end encryption. This is a fight the UK should not have picked. The reported details suggest the UK is seeking the ability to access encrypted information Apple users store on iCloud, no matter their location. This overreach sets a hugely damaging precedent and will embolden abusive regimes the world over." - Privacy International's Legal Director, Caroline Wilson Palow

For additional follow up please contact [email protected]

Permalink: https://privacyinternational.org/node/5520

Sources:

NOTES FOR EDITORS:

Privacy International (PI) is a London-based non-profit, non-governmental organisation that researches and advocates globally against government and corporate abuses of data and technology.

What PI is calling for

Hacking Safeguard 3 Necessity and Proportionality

Prior to carrying out a hacking measure, government authorities must, at a minimum, establish: A high degree of probability that: A serious crime or act(s) amounting to a specific, serious threat to national security has been or will be carried out; The system used by the person suspected of

Hacking Safeguard 8 Oversight and Transparency

Government authorities must be transparent about the scope and use of their hacking powers and activities, and subject those powers and activities to independent oversight. They should regularly publish, at a minimum, information on the number of applications to authorise hacking approved and