US Congress investigates UK demand for Apple encryption backdoor
In brief
- US Congress investigates UK's secret Technical Capability Notices demanding encryption weakening
- UK Home Office demanded Apple backdoor access to end-to-end encrypted iCloud backups
- Apple withdrew Advanced Data Protection for UK users instead of building backdoor
- Over 100 civil society groups urged UK to rescind the notice; Apple appealing
The UK notice and Apple's response
The target was Apple's Advanced Data Protection feature, which encrypts iCloud data so thoroughly that even Apple cannot access it. The Investigatory Powers Act 2016 gives UK authorities the power to issue these notices with stringent secrecy directives, preventing recipients from publicly disclosing receipt.
Apple's choice to withdraw the feature rather than comply stands as a stark illustration of the tension between government surveillance demands and encryption integrity. The company is reportedly appealing parts of the Technical Capability Notice. The UK government has not publicly responded to criticism from over 100 civil society groups who signed a letter in February 2025 urging the UK government to rescind the notice.
US congressional pressure and international precedent
US lawmakers sent letters in February 2026 requesting a UK briefing by March 11, 2026, about the Technical Capability Notice, pressing for transparency on how the powers are being used. The CLOUD Act, passed in 2018, was designed to create a framework for bilateral data-sharing between the US and allied governments. The UK notice raises questions about whether secret encryption-weakening demands fall outside the scope of bilateral agreements.
The UK government's national security and law enforcement rationale for surveillance powers is established in law. Yet the secrecy surrounding Technical Capability Notices — and Apple's response to withdraw a consumer protection feature — suggests the mechanism may operate beyond the bounds of public accountability or congressional oversight.
Crypto implications
The entire cryptocurrency ecosystem rests on cryptographic foundations. Private keys, wallet security, encrypted communications all depend on the integrity of encryption standards. If a precedent is established where governments can secretly compel companies to weaken encryption, the implications could cascade through every layer of digital asset infrastructure, according to security researchers cited in the investigation.
Crypto exchanges rely on strong encryption to protect user funds and personal data. Projects like Monero, Zcash, and other privacy coins already operate under varying degrees of regulatory pressure. For mainstream crypto exchanges and custodial services, companies like Coinbase and Kraken already comply with extensive regulatory requirements. A global precedent for secret encryption-weakening demands could reshape compliance obligations across the industry.
