Apple says the UK's Online Safety Bill, which would mandate scanning messages for CSAM, should be amended to protect encryption, joining WhatsApp and Signal
Apple has criticised powers in the Online Safety Bill that could be used to force encrypted messaging tools like iMessage …
Context & Ripple Effects
Apple is the last of the three major encrypted-messaging operators to speak up on the UK's Online Safety Bill, but it arrives into an established campaign: Will Cathcart had already warned ministers in 2022 that weakening encryption would embolden authoritarian regimes, and in April WhatsApp and other apps signed a joint letter urging a rethink over mandated CSAM scanning (a coordinated industry letter). With Apple now publicly asking for amendments alongside WhatsApp and Signal, every major provider of end-to-end encrypted messaging in the UK market is on record against the bill's scanning powers.
The stakes are not rhetorical. Within weeks Apple escalated to saying it would rather pull FaceTime and iMessage from the UK than comply (threatening to withdraw its messaging services), and by 2024 it argued the legislation could let the UK secretly veto security features worldwide — a fight that later moved into court, where Cathcart pledged WhatsApp's support for Apple's case against the Home Office (WhatsApp backing Apple's legal challenge).
First-order effects
- The UK government now faces a united front from Apple, WhatsApp and Signal on the bill's scanning powers, removing any prospect of dividing the encrypted-messaging industry on compliance.
Second-order effects
- Apple's stated willingness to remove iMessage and FaceTime from the UK turns the bill from a compliance question into a market-access question, forcing ministers to weigh child-safety mandates against losing the country's dominant messaging platforms.
Third-order effects
- If the dispute settles into litigation rather than amendment, jurisdictional fights over encryption backdoors become a standing feature of platform regulation — with each national mandate contested as a potential global veto over security features, exactly the precedent Apple says the UK would set.
The trend: End-to-end encryption is shifting from a product design choice to a regulatory battleground, with platform makers increasingly willing to litigate or exit markets rather than weaken client-side security.