In a reversal that marks a significant win for digital privacy advocates worldwide, the United Kingdom has officially dropped its demand for Apple to provide backdoor access to user data protected by the company's Advanced Data Protection (ADP) encryption service. This development represents the best case scenario for a months-long diplomatic and legal battle that began with a secret government order earlier this year.
The resolution came from direct intervention of US Director of National Intelligence Tulsi Gabbard, who announced the news on social media Monday.
"Over the past few months, I've been working closely with our partners in the UK, alongside @POTUS and @VP, to ensure Americans' private data remains private and our Constitutional rights and civil liberties are protected," Gabbard posted, adding that "the UK has agreed to drop its mandate for Apple to provide a 'backdoor' that would have enabled access to the protected encrypted data of American citizens and encroached on our civil liberties."
This diplomatic success represents more than just a bilateral agreement, it demonstrates the power of principled leadership in defending fundamental digital rights. The intervention came at a key moment when the UK government reportedly found itself "with its back against the wall" according to unnamed officials, looking for a way out of an increasingly untenable position.
The situation began in January 2025 when the UK Home Office issued a secret order demanding Apple provide backdoor access to encrypted files uploaded by users worldwide to iCloud. This wasn't a request limited to UK citizens; it would have compromised the security of users globally, including Americans, fundamentally undermining the promise of end-to-end encryption.
Apple's response was swift and principled. Rather than comply with demands that would weaken security for all users, the company made the difficult decision to suspend new Advanced Data Protection enrollments in the UK. The move marked a stand for the principle that strong encryption cannot have "special access" doors that only "good actors" can use.
The company also challenged the order in court, ultimately winning the right to publicly discuss the case in April. This transparency proved crucial in building both public awareness and international pressure for a resolution.
The UK's decision to abandon its backdoor demands is a significant moment in time with regards to the ongoing global debate over encryption. Had the UK succeeded, it would have set a dangerous precedent for other governments to make similar demands.
As we’ve discussed on Decrypted many times, backdoors don't discriminate between "good guys" and "bad guys." Any weakness introduced into encryption systems creates vulnerabilities that can be exploited by criminals, foreign adversaries, and malicious actors. By maintaining the integrity of ADP encryption, Apple continues to protect users from impending threats.
The resolution through diplomatic channels rather than technical compromise shows that privacy and security don't have to be sacrificed for international cooperation. Law enforcement agencies can work together without undermining the digital infrastructure that protects everyone.
This resolution represents more than just a win for Apple or its users. It's a victory for anyone who believes that strong encryption is essential for digital security. As governments worldwide continue to grapple with the challenges of law enforcement in the digital age, this case provides a roadmap for how to balance security needs with fundamental rights.
The path forward requires continued vigilance from privacy advocates, principled leadership from technology companies, and diplomatic engagement between nations that prioritizes the long-term security of the digital infrastructure we all depend on. This outcome proves that when these elements align, it's possible to protect both privacy and security without compromise.
The UK's decision to drop its backdoor demands doesn't end the global debate over encryption, but it does provide a powerful example of how these disputes can be resolved in a way that strengthens collective digital security.
Simply put, we should all breathe a big sigh of relief that the story ended this way.