Apple Will Check iCloud Files and Photos Shared With 'Anyone With the Link' for Harmful Content Starting in iOS 27.3
Starting with iOS, iPadOS, macOS and visionOS 27.3, Apple will check publicly linked iCloud Photos and Drive items for undefined harmful content and may disable accounts or involve law enforcement.
Apple says it will start checking photos and files shared publicly from iCloud for "harmful content." The change arrives with iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3, and applies to anything shared with the "Anyone with the link" option. Apple has not said what counts as harmful or how the checks work, but it says it may delete content, disable accounts and involve law enforcement.
What Happened
A new Apple support document, published on 3 November 2026, says that "items shared using Anyone with the Link will be checked by Apple for harmful content." The 27.3 releases are in developer beta and are expected to roll out to the public in December.
The policy covers:
- Photos and videos shared from iCloud Photos through a public link.
- Files and folders shared from iCloud Drive through a public link.
Items shared with "People you choose", where only invited Apple Accounts can open them, are not mentioned in the document. Apple does not say it will scan private iCloud libraries.
What Apple Says It Can Do
According to the support document, Apple reserves the right to move, refuse, modify, remove or delete content at any time. If someone uploads harmful content, Apple may act against their account. Possible actions include:
- Blocking or disabling the Apple Account.
- Blocking new accounts tied to the same email address or phone number.
- "Involving law enforcement" where necessary.
The Encryption Question
The document also makes clear that content shared with "Anyone with the link" is no longer end-to-end encrypted, even when Advanced Data Protection is turned on. That has been true for public links for some time. A link anyone can open has to be readable by Apple's servers. What changes in 27.3 is that Apple will actively inspect that content.
For people who rely on Advanced Data Protection, the practical point is simple: once you create a public link, that item leaves your end-to-end encrypted space and Apple can read it.
What Is Still Unclear
Apple has left several questions unanswered:
- What "harmful content" means. The document does not define it. Commentators have suggested it could cover child sexual abuse material (CSAM) or malware, given the reference to law enforcement, but Apple has not confirmed this.
- How the checks work. There is no word on hash matching, machine-learning classifiers or human review, or on how false positives are handled and appealed.
- Whether old links are covered. Apple has not said whether links created before 27.3, or links created on devices that have not updated, will be checked.
- Why now. Apple has given no reason for the change.
Why It Matters
Apple has been here before. In 2021 it announced a plan to detect known CSAM in photos on users' devices before upload to iCloud. After strong objections from privacy and security researchers, it paused and later abandoned the plan. The new policy is different and narrower. It runs on Apple's servers, not on the device, and only on content the user has already chosen to make public. Most large cloud storage and file-sharing services already scan publicly shared files for abuse and malware.
Still, the lack of detail matters. A vague "harmful content" rule combined with account bans and law-enforcement referrals affects anyone who uses iCloud links to share work files, photo albums or software. Without a published definition, users cannot know what might get their account disabled, and there is no described appeal process.
It is also worth considering security. Public cloud links are a common way to deliver malware and phishing payloads because they come from a trusted domain. If Apple's checks include malware, abuse of iCloud links for that purpose should become harder.
What To Do Now
- Review your public links. On iPhone or iPad, check shared albums and iCloud Drive items under the Shared section in Files and Photos. On the web, check iCloud Drive's shared items at icloud[.]com. Stop sharing anything that no longer needs to be public.
- Use "People you choose" for sensitive files. Invite specific Apple Accounts instead of creating a link anyone can open. Content shared this way is not covered by the new checks.
- Do not count on Advanced Data Protection for shared links. Treat any public link as readable by Apple and by anyone who gets the URL.
- Organisations: if staff use personal iCloud links to move work files, this is a good time to move that traffic to a managed file-sharing service with clear retention and access rules.
- Watch for Apple's follow-up. Apple may publish more detail before 27.3 ships, including a definition of harmful content and how disputes are handled.
The change is small in scope but signals a direction: content you make public in the cloud is increasingly treated as the provider's responsibility, and providers are going to look at it.
