Millions of iPhones lose security feature after fears it ‘tries to spy on users’
Apple is removing one of its most advanced data protection features for iPhone users in the UK.
The tech giant's decision follows the UK government's demand for access to user data.
The feature, called Advanced Data Protection (ADP), provides end-to-end encryption for most files stored in iCloud, meaning only the user has access to them. Not even Apple can access it.
However, under the Investigatory Powers Act 2016, the UK government reportedly requested the ability to access fully encrypted files from Apple users.
Advert
As a response, Apple has now confirmed that ADP will no longer be available in the UK.
New users won’t have the option to enable it and 'existing users will eventually be forced to disable the feature.'
"We are gravely disappointed that the protections provided by ADP will not be available to our customers in the UK given the continuing rise of data breaches and other threats to customer privacy," the company stated.
The removal of the feature means Apple may now be able to access user data like iMessages - that would otherwise be protected - and share it with authorities if legally required.
While this change affects UK users, Apple has not removed ADP in the US or other regions.
"Apple remains committed to offering our users the highest level of security for their personal data and are hopeful that we will be able to do so in the future in the United Kingdom," Apple continued. "As we have said many times before, we have never built a backdoor or master key to any of our products or services and we never will."
The company noted that they will continue to encrypt 14 types of data on iCloud, including health data, iMessage and FaceTime.
However, broader cloud storage - including photos, backups, and notes - will no longer have the same level of encryption for UK users.
Many tech experts defend the feature as essential to user privacy, whilst cybersecurity officials are warning that the weakened encryption could expose users to greater cyber threats.
Graeme Stewart from cybersecurity company Check Point explained that the move is 'effectively smashing open Pandora's box and hoping the chaos stays neatly inside.'
He added: "At its heart, encryption isn't just for criminals; it's a shield for millions of law-abiding citizens, businesses, and critical infrastructure."
"Now we are prying open that door to our digital Fort Knox, there's no telling what else might slip through."
Similarly, Dray Agha, senior manager of security operations at cybersecurity firm Huntress warned: "Apple’s decision to pull Advanced Data Protection in the UK is a direct response to increasing Government demands for access to encrypted user data.
"Weakening encryption not only makes UK users more vulnerable to cyber threats but also sets a dangerous precedent for global privacy."