Apple has declared its intention to withdraw essential services like FaceTime and iMessage from the UK rather than compromise on security if new proposals under the updated Investigatory Powers Act (IPA) 2016 become law and are implemented. The UK government is seeking to amend the IPA, demanding that messaging services seek approval from the Home Office for security features before releasing them to the public.
Under the current act, the Home Office can demand that security features be disabled without public knowledge. However, the proposed update would require immediate compliance, removing the option for review, independent oversight, or the right to appeal for technology companies before taking action.
Many messaging services, including WhatsApp and Signal, have opposed a clause in the Online Safety Bill that would require companies to install technology to scan for child abuse material in encrypted messaging apps and other services. They have stated their refusal to comply with this clause, with Signal even threatening to leave the UK.
Apple, a long-standing critic of the Investigatory Powers Act, has now voiced its strong opposition to the proposed amendments. In a nine-page submission to the consultation, Apple opposes various aspects of the updates, including the requirement to inform the Home Office about changes to product security features before release, the imposition of changes affecting global products, and the immediate action required upon receiving a notice to disable or block a feature.
Apple maintains that it would not compromise the security features of its products specifically for one country, as it would weaken the security for all users. Additionally, some changes would necessitate issuing a software update, making it impossible to implement them secretly.
As per Apple, the proposals pose a significant threat to data security and privacy, extending their impact beyond the UK’s borders. Cybersecurity expert Prof Alan Woodward from Surrey University points out that technology companies are likely to resist these requirements vehemently, stating that the government’s assumptions about compliance are rooted in “arrogance and ignorance.”
In response to Apple’s stance, the Home Office defends the Investigatory Powers Act, emphasizing its role in protecting the public from criminals, child sex abusers, and terrorists. The consultation on the proposed amendments, open for eight weeks, seeks to align the act with current technology without creating new powers.
While the outcome of the consultation remains uncertain, Apple’s unwavering commitment to data security sends a clear message about its priorities. As the technology landscape continues to evolve, the debate between government authorities seeking more surveillance capabilities and tech companies striving to protect user privacy is bound to intensify. Currently, no final decisions have been made, and stakeholders on both sides will closely watch the developments in the UK’s approach to data security and surveillance.