What is Apple’s Advanced Data Protection, and why is its removal in the UK controversial?

As mentioned earlier, the Advanced Data Protection (ADP) feature for iCloud enables encryption for iCloud data and gives control of the encryption key solely to the data owner. This means the encrypted data cannot be accessed by Apple or any third party. However, Apple could access the data if legally compelled to do so or if a user requested the company’s help in recovering lost data.

Your health data, payment data, contacts, calendars, reminders, notes, iMessage and FaceTime content, iCloud Keychain information, Home app data, and Wi-Fi and cellular interactions are typically stored in iCloud. However, ADP is an opt-in feature, meaning users must choose to enable it—it is not enabled by default.

What is encryption and what does it do?

Encryption is a mathematical process that alters data using an encryption algorithm and a key. The science of encrypting and decrypting information is called cryptography. Encryption has long been used to store sensitive information. If history tells us anything, encryption is not a new concept; for centuries, governments have controlled secret codes and used them in diplomacy and espionage.

By default, Apple’s encryption feature is disabled. (Image credit: Anuj Bhatia/Indian Express)

At a basic level, the purpose of encryption is to protect the confidentiality of digital data stored on computer systems or transmitted over the internet and other computer networks. For example, each time you carry out a transaction at an ATM or buy something online, encryption protects the transmitted data. However, end-to-end encryption is a step up in security—essentially, you are responsible for the key used to encrypt your iCloud data. If you lose this key, recovering your iCloud data will be impossible. These days, end-to-end encryption is commonly used by messaging apps like Signal as well as password managers.

Why is Apple’s ADP being withdrawn from the UK?

Apple’s decision to remove its highest-level data security tool for users in the United Kingdom came after the UK government demanded access to encrypted data earlier this month. This demand was made under the Investigatory Powers Act (IPA), which compels companies to provide information to law enforcement agencies.

To meet such a demand, Apple would have had to create a security “backdoor”—a key that would allow the government to bypass encryption and access files. This would apply to all content stored using what Apple calls “Advanced Data Protection” (ADP). Instead of creating a “backdoor” for the government, Apple decided it would no longer be able to offer the security feature to users in the UK. The company argues that once a backdoor is created, the user data could be easily accessible and targeted by bad actors, weakening its encryption systems and leaving iCloud users worldwide vulnerable to data breaches.

What does the removal of ADP mean for UK users?

For many users, the removal of ADP doesn’t change anything, as the feature was always opt-in, and only those who chose to enable it were using it. However, if you try to turn the feature on in the UK now, it is no longer functional. Although ADP is no longer available in the UK, many iCloud features are still end-to-end encrypted by default, including health data and Apple’s password management system, iCloud Keychain.

Why do governments want access to user data?

The British government’s request for Apple to grant access to its citizens’ encrypted iCloud data may come as a shock to many, but governments and law enforcement agencies worldwide have been demanding greater access to user data, putting companies like Apple at loggerheads with these agencies. Surveillance agencies and law enforcement dislike being unable to access encrypted data. Time and again, governments, police, and security services have argued that end-to-end encryption is being used by criminals such as terrorists and child abusers to hide their activities online, making it more difficult to catch them. Apple, for its part, has made it clear that the lack of encryption would increase attacks on users, and therefore, its priority must be their security.

How to enable Advanced Data Protection on iPhone

Step-by-step guide to enable Advanced Data Protection on iCloud. (Express Photo)

1.)Turn on two-factor authentication for your Apple ID if you haven’t done so already.

2.)Update all your Apple devices to iOS 16.2, iPadOS 16.2, macOS 13.1, tvOS 16.2, watchOS 9.2, or newer.

3.)Open the Settings app.

4.)Tap your name, then tap iCloud.

5.)Scroll down, tap Advanced Data Protection, then tap Turn on Advanced Data Protection.

6.)Follow the onscreen instructions to review your recovery methods and enable Advanced Data Protection.