In February 2025, Apple withdrew Advanced Data Protection (ADP) for new UK users after the Washington Post revealed a secret Technical Capability Notice (TCN) issued under the Investigatory Powers Act 2016. The TCN didn't order Apple to disable ADP — it ordered Apple to maintain the capability to decrypt ADP-protected data on demand. Apple's response was to stop offering the feature entirely rather than build the backdoor. The result is a two-tier encryption regime: users who enabled ADP before the cutoff retain it; everyone else cannot get it. The technical detail matters. All iCloud data is encrypted, but standard encryption means Apple holds the keys and can comply with lawful requests. ADP shifts several additional categories — backups, photos, notes — to end-to-end encryption where Apple cannot decrypt even if compelled. Apple designed ADP so that only the user's trusted devices can modify the setting. Apple's servers literally cannot roll it back. This architectural choice is what created the two-tier split: Apple couldn't mass-disable the feature even if it wanted to. The UK government's original demand was breathtaking in scope — it sought access not just to UK users' data but to Apple users worldwide. This was later narrowed in late 2025 to UK citizens only, reportedly after the Trump administration applied pressure over implications for American users. The episode demonstrates how a single national security order, issued in secret under gag provisions, can reshape the privacy architecture available to an entire country's population. The secrecy provisions are structurally important. A TCN requires Judicial Commissioner approval, but the recipient is gagged from revealing its existence. The Home Office will neither confirm nor deny any specific TCN. Apple effectively confirmed the confrontation without acknowledging the TCN directly, stating it had "never built a backdoor or master key to any of our products or services and we never will." Privacy International and others brought the matter to the Investigatory Powers Tribunal, arguing that secret compulsion to weaken encryption demands public scrutiny. The precedent risk extends far beyond Apple. If a government can compel one provider to maintain decryption capability, the same logic applies to WhatsApp, Signal, cloud storage providers, password managers, and banks — any service relying on genuine end-to-end encryption. Tim Cook's 2016 warning about the San Bernardino case — that a backdoor "is for everybody, for good guys and bad guys" — maps precisely onto this scenario. The difference is that in 2016 Apple fought in open court; in 2025, the entire dispute was meant to remain secret. The two-tier outcome exposes a structural absurdity. Alice and Bill are both UK residents, both subject to the same laws, both paying Apple for identical services. Alice enabled ADP in 2024; Bill either didn't know about the opt-in feature or bought his phone after the cutoff. Alice has stronger encryption. Bill cannot obtain it. Apple has indicated existing users will eventually need to disable ADP themselves but has published no deadline. The gap is real, arbitrary, and entirely a product of timing. By July 2026, Apple lodged a fresh complaint at the Investigatory Powers Tribunal, which became public the following month. The legal battle continues, but the damage is done: the UK has established that secret government orders can remove encryption options from an entire population, with the only defense being whether you happened to opt in before the window closed.
