X

Apple must warn about China privacy risk, says Amnesty International

The human rights group launches a campaign to pressure Apple after it moved iCloud data controls to China. But Apple says it's been very clear with its customers.

Stephen Shankland Former Principal Writer
Stephen Shankland worked at CNET from 1998 to 2024 and wrote about processors, digital photography, AI, quantum computing, computer science, materials science, supercomputers, drones, browsers, 3D printing, USB, and new computing technology in general. He has a soft spot in his heart for standards groups and I/O interfaces. His first big scoop was about radioactive cat poop.
Expertise Processors, semiconductors, web browsers, quantum computing, supercomputers, AI, 3D printing, drones, computer science, physics, programming, materials science, USB, UWB, Android, digital photography, science. Credentials
  • Shankland covered the tech industry for more than 25 years and was a science writer for five years before that. He has deep expertise in microprocessors, digital photography, computer hardware and software, internet standards, web technology, and more.
Stephen Shankland
3 min read
An Amnesty International campaign pressures Apple to improve privacy for Chinese customers of the iCloud data storage and sync service.

An Amnesty International campaign pressures Apple to improve privacy for Chinese customers of the iCloud data storage and sync service.

Amnesty International

Facebook is in the hot seat for undermining privacy, but it's not alone. Amnesty International on Thursday objected to Apple's moving some iCloud data controls to China.

"By handing over its China iCloud service to a local company without sufficient safeguards, the Chinese authorities now have potentially unfettered access to all Apple's Chinese customers' iCloud data. Apple knows it, yet has not warned its customers in China of the risks," said Nicholas Bequelin, East Asia director at Amnesty International, in a statement. "Apple needs to be much more transparent about the risks to privacy posed by recent changes to the iCloud service in China."

iCloud is used to store data like photos, contacts, calendar entries, documents, and other files synchronized across Apple devices like MacBooks and iPhones. Such storage and sync services -- along with social networks, email services and photo-sharing sites -- mean much of our most personal data is now stored far away from our own laptops and phones.

In February, Apple started storing encryption keys for iCloud data in China with a third-party company, Guizhou Cloud Big Data, in response to new legal requirements. The decision wasn't made lightly, and Apple was very clear about the change, Apple said in a statement:

"China recently enacted laws requiring that cloud services offered to their citizens be operated by Chinese companies and that Chinese customers' data be stored in the country. While we advocated against iCloud being subject to these laws, we were ultimately unsuccessful. Our choice was to offer iCloud under the new laws or discontinue offering the service. We elected to continue offering iCloud as we felt that discontinuing the service would result in a bad user experience and less data security and privacy for our Chinese customers," Apple said.

"We have been very transparent with our customers about this change. Beginning in early January and over the course of eight weeks, a series of emails and push notifications have informed all of our Chinese customers of the transfer and provided them with maximum flexibility to make changes," Apple added. Customers can opt out of using iCloud, Apple said, but so far "more than 99.9% of iCloud users in China have chosen to continue using the service."

Amnesty International, a nonprofit advocate of human rights, said it's launching a social media campaign to pressure Apple to protect privacy, timing the effort to a visit by Tim Cook to China. It accused Apple of putting profits before people but didn't offer any specific advice about how to handle Chinese legal requirements beyond disclosing risks to customers.

"Chinese domestic law gives the government virtually unrestricted access to user data stored inside China without adequate protection for users' rights to privacy, freedom of expression or other basic human rights," Amnesty International said. "As a result, Chinese internet users can face arrest and imprisonment for merely expressing, communicating or accessing information and ideas the authorities do not approve of."

First published March 22, 2:20 p.m.

Update, 3:24 p.m.: Adds comment from Apple

Security:  Stay up-to-date on the latest in breaches, hacks, fixes and all those cybersecurity issues that keep you up at night.

Blockchain Decoded:  CNET looks at the tech powering bitcoin -- and soon, too, a myriad of services that will change your life.