Apple will begin checking photos and files shared through public iCloud links for harmful content in version 27.3 or later of iOS, iPadOS, macOS, and visionOS. The policy applies to content shared with “Anyone with the Link,” including items in iCloud Photos and iCloud Drive, and Apple set out the change in a support document published November 3, 2026.
Public iCloud Link Scanning
Apple’s notice applies to link-based sharing rather than to every private photo or file stored in iCloud. The company says the “People you choose” option, which limits access to invited or approved users, is outside the described checks. That means the setting attached to a shared item decides whether access stays limited or becomes available to anyone with the link.
When users share content stored in iCloud, they can send a copy or share a link. The link-sharing system offers two access settings. “People you choose” restricts access, while “Anyone with the Link” lets people open the item without individual approval. Apple says the second setting also makes that content accessible to the company, and it treats the public-link option as a privacy boundary.
Apple says an item shared through “Anyone with the Link” is no longer protected by end-to-end encryption. That applies even when the owner or other participants have turned on Advanced Data Protection, so public sharing remains an exception to that protection. The source frames this as a privacy issue for users who share sensitive documents and personal photos.
What Apple Says It Can Do
According to Apple’s support notice, public-link content will be checked for harmful material. The document does not define harmful content or explain how detection works. It also does not identify the scanning tools, describe human review, or say whether checks happen before recipients can open a link.
Apple says it reserves the right to move, refuse, modify, remove, or delete harmful content at any time. It may also block or disable the associated Apple Account and stop new accounts from being created with the same email address or phone number. The notice also says Apple can involve law enforcement when necessary.
The document does not explain review standards, appeal options, or how users would challenge an incorrect flag. It leaves those details open, including what happens when an account faces restrictions.
Access Limits and Unanswered Questions
The source places the announcement in a wider discussion about access to cloud data. Cybersecurity News previously covered reported UK demands for access to encrypted iCloud backups. This change is narrower than that debate because it concerns items that users deliberately share through public links, not an expansion of access across private iCloud storage.
Apple also leaves one timing point unresolved. The notice does not say whether links created before version 27.3 will be checked under the new policy. For now, the practical distinction remains between public sharing and the “People you choose” setting, which keeps access limited to approved recipients.
Licensed under CC BY-ND 4.0 International