Apple is changing how it handles photos and files shared through public iCloud links, introducing content scanning that could result in files being removed or accounts being restricted.
Starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3, Apple will review iCloud content shared using the “Anyone with the link” option to identify potentially harmful material.
The change, outlined in a new Apple support document, is expected to take effect when the updates arrive in December.
Which iCloud Photos and Files Will Be Scanned?
The new policy applies specifically to publicly shared content in iCloud Photos and iCloud Drive.
When you create a link that anyone can open, the shared content becomes accessible to Apple for review.
However, the scanning does not apply to everything stored in iCloud.
Files and photos shared directly with specific people, including those sent using the “Send a Copy” option, are excluded.
That distinction matters because the policy targets publicly accessible links rather than private files stored in your iCloud account.
Apple Could Remove Files or Restrict Accounts
Apple says it may take action when its systems identify harmful content, although it hasn’t provided a complete definition of what qualifies.
Potential concerns include malicious files, malware, and child sexual abuse material.
Depending on the circumstances, Apple reserves the right to remove or delete flagged content, restrict sharing capabilities, or block an Apple Account. Its documentation also mentions possible involvement by law enforcement.
The possibility of account restrictions raises questions about false positives, particularly when automated systems incorrectly flag legitimate files.
Apple previously abandoned a broader proposal to scan iCloud Photos libraries for child sexual abuse material in 2021 following criticism from privacy advocates and security researchers.
What About Advanced Data Protection?
There’s an important privacy distinction for people who use Apple’s Advanced Data Protection feature.
Although Advanced Data Protection provides end-to-end encryption for supported iCloud data, files and photos shared through publicly accessible links are not end-to-end encrypted, even when the feature is enabled.
Creating a public link makes that specific content accessible outside the private encryption protections normally associated with Advanced Data Protection.
Apple hasn’t clarified whether the scanning will also apply to existing public links created before the updates arrive.
When Does the Change Take Effect?
The new scanning policy is expected to roll out in December alongside Apple’s 27.3 software updates.
For anyone who regularly shares iCloud photos or documents, the key distinction is how those files are shared.
Public links will be subject to review, while content shared privately with selected recipients remains outside the scope of the announced scanning policy.
