The British government's stance on whether it has ordered access to encrypted customer data held by Apple has been described as 'farcical' by a lawyer representing civil liberties groups. The government maintains a policy of neither confirming nor denying the existence of such orders, citing national security concerns.
In January of the previous year, Britain issued a technical capability notice (TCN) to gain access to encrypted cloud backups. This demand was later dropped following negotiations with the U.S. administration under President Donald Trump. However, in July, a second notice was issued, specifically targeting Apple's UK customers.
Apple has initiated legal proceedings at the Investigatory Powers Tribunal (IPT) to challenge the order, but details remain restricted due to legal limitations. Campaign groups Privacy International and Liberty have also taken action, arguing that such an order infringes on human rights and compromises overall security, even as the government refuses to confirm its existence.
During a hearing at the IPT, Ben Jaffey, representing the campaign groups, stated that the government's position had become 'farcical' given that the original notice had already been publicly referenced by U.S. politicians and unnamed UK government sources. Both Jaffey and Apple's lawyer contended that the government's secrecy policy undermines open justice and hinders public discourse on the matter.
Neil Sheldon, the British government's lawyer, argued that any deviation from the current secrecy policy would pose a national security risk, potentially aiding hostile actors by revealing which operators are subject to TCNs. The IPT is expected to rule on the secrecy policy at a later date, with a full hearing on the case anticipated next year.
Apple has stated that it does not have access to the encrypted data of users who utilize its Advanced Data Protection feature. The company has expressed concerns that creating an entry point for one government could be exploited by hackers or hostile states, thereby weakening security for all users. In response to Britain's demands, Apple withdrew its Advanced Data Protection feature for UK users in February of the previous year, reiterating its commitment not to build backdoors.