UK iCloud data demand wanted far more than the world's Messages

The UK seemed to give in over demanding Apple give it backdoor access to iPhone users' encrypted data, but it may still be pressing for it — and it wanted much more than was previously believed.

The UK government previously passed a law allowing itself to demand Apple not only provide a backdoor into iOS, but also forbid the company from revealing the order. That led to outrage from users and politicians, but appeared to have been settled with the UK backing down.

Now new court filings seen by the Financial Times show that Apple's appeal against the demand is continuing. It's not clear whether the documentation reflects the original demand, or whether the UK has actually not rescinded the order.

But it also reveals that the UK's secret demands were even more far-reaching than was believed. Rather than solely requiring Apple to allow it access to currently encrypted data on iPhones, the UK government demanded full access to all of iCloud.

The new legal filing is reportedly from the UK's Investigatory Powers Tribunal (IPT). The IPT has separately published documentation about the case so far, but the public version does not include this new information.

That new information consists of two IPT judges setting out what they describe as the "assumed facts" that will be argued in court in early 2026. It says that the UK's Technical Capability Notice (TCN) was "not limited to" the Advanced Data Protection (ADP) encryption as previously reported.

Apple turned off ADP for UK users rather than comply. But now it seems that this was not sufficient to release Apple from the TCN's demands.

Instead, the UK's TCN demand featured "obligations to provide and maintain a capability to disclose categories of data stored within a cloud-based backup service." This does not just mean listing types of data kept by iCloud, it means allowing access to them — which means Messages, Mail, and, the filing implies, also passwords.

One element that had been previously reported but is now confirmed, is that the UK government was demanding this access worldwide. "The obligations included in the TCN are not limited to the UK or users of the service in the UK," says the filing, "they apply globally in respect of the relevant data categories of all iCloud users."

The UK can do this because, again, it granted itself permission for what is called extraterritorial powers. That therefore means, in theory, the UK can make this demand concerning US users — and that has caused bipartisan anger in the States.

Worldwide outrage

It's appears certain that these demands contravene existing US/UK agreements. Tulsi Gabbard, the US National Intelligence Director, wrote in February 2025, that "Upon initial review of the US and UK bilateral CLOUD Act Agreement, the United Kingdom may not issue demands for data of U.S. citizens, nationals, or lawful permanent residents ('US persons'), nor is it authorized to demand the data of persons located inside the United States."

"Our intelligence relationships with foreign partners are of vital importance to our national security," she continued, "however, my obligations as Director of National Intelligence include protecting both the security of our country and the God-given rights of the American people enshrined in the U.S. Constitution."

Consequently, it is also certain that if the UK succeeds, it will affect global security. It would make the UK one of the very least secure countries in the world, meaning all foreign powers must reconsider sharing intelligence with it.

What happens next

The IPT filing is in preparation for a court case between Apple and the UK government, which is not scheduled to take place until early 2026. It's possible that the reports of the UK backing down mean that Apple's appeal is not necessary, and it may not go ahead.

But the fact that the UK's secret demands were far broader than believed, suggests that may at best have capitulated on part of it.

The UK government refuses to comment on what it calls "operational matters," even to the extent of not confirming the existence of its TCN. Then its own laws forbid Apple from commenting publicly.

But there is a canary in the coal mine. If Apple does not turn back on Advanced Data Protection for UK users — and so far it has not — then the case is continuing. And so is the UK's attempt to gain backdoor access.