Follow us on Google News
Apple plans to begin scanning photos and files shared through public iCloud links for harmful content, introducing a significant change to how the company handles material made accessible through its “Anyone with the Link” sharing option.
The policy will apply starting with iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3, according to an Apple support document.
The change specifically affects content shared from services such as iCloud Photos and iCloud Drive when users choose to make an item accessible to anyone who possesses the link.
Apple says that once users choose this sharing option, the content becomes accessible to anyone with the link, including Apple itself.
Public iCloud Links Will Be Checked
Apple states that items shared using “Anyone with the Link” will be checked for harmful content beginning with version 27.3 of its major operating systems.
The policy applies only when content is shared through a publicly accessible link.
Users who keep their photos and files within their private iCloud environment are not described in the support document as being subject to the same public-link checks.
The change therefore draws a clear distinction between private iCloud content and material intentionally exposed through public sharing.
End-to-End Encryption Will Be Disabled
One of the most important implications concerns encryption.
Apple says that when an item is shared using “Anyone with the Link,” end-to-end encryption is disabled for that content.
This remains the case even if the owner or recipient has enabled Advanced Data Protection, Apple’s optional security feature that extends end-to-end encryption to additional categories of iCloud data.
Advanced Data Protection can protect services such as iCloud Backup, Photos and Notes using end-to-end encryption, but Apple’s support document makes clear that this protection does not continue once the content is shared through a public link.
That means Apple can access the content when it is publicly shared in this way.
Apple Has Not Defined ‘Harmful Content’
The support document does not provide a detailed public definition of what Apple considers harmful content.
It is also unclear what technical methods the company will use to perform the checks.
Apple has not explained whether the system will rely primarily on automated detection, human review or a combination of methods.
The company has also not said whether previously created public links will be scanned retroactively after the 27.3 updates are released.
Another unresolved question is whether links created before the update but still active after installation will automatically fall under the new policy.
Harmful Content May Be Removed
Apple says it may remove or delete content that it determines to be harmful.
The company also reserves the right to take action against the associated Apple Account.
Possible measures include blocking or disabling an Apple Account and preventing the creation of a new account using the same email address or phone number.
Apple also says that law enforcement may be contacted where necessary.
The policy therefore goes beyond simple content scanning and creates the possibility of account-level enforcement where material is found to violate Apple’s rules.
Change Applies Only to Public Sharing
The scope of the policy is important.
The change does not mean Apple will begin scanning all iCloud Photos or iCloud Drive files.
Instead, the support document focuses specifically on content made public through the “Anyone with the Link” setting.
That distinction matters because users may assume that enabling Advanced Data Protection guarantees end-to-end encryption in every sharing scenario.
Apple’s new guidance makes clear that this assumption does not apply when content is made publicly accessible through a link.
Privacy Questions Likely to Follow
The policy is likely to raise questions about how Apple balances user privacy with content moderation and platform safety.
Apple has historically promoted end-to-end encryption as a major privacy feature across its services.
By disabling that protection for publicly shared links, the company is effectively treating public distribution differently from private storage.
The new policy may also prompt users to pay closer attention to the sharing settings they choose when sending files or photos through iCloud.
Users who want content to remain end-to-end encrypted will need to avoid the “Anyone with the Link” option and use sharing methods that preserve private access controls.
Rollout Expected With Version 27.3
The harmful-content checks are expected to begin with version 27.3 of iOS, iPadOS, macOS and visionOS.
Apple has not yet publicly detailed the full rollout timeline or explained whether the policy will apply identically across all regions.
The company has also not clarified whether users will receive warnings before a public link loses end-to-end encryption.
For now, the main confirmed change is straightforward: publicly shared iCloud links will be accessible to Apple for harmful-content checks, and content shared in this manner will no longer retain end-to-end encryption.
The update introduces a new privacy consideration for users who rely on iCloud to distribute photos and files publicly and makes the choice of sharing method more important than before.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
