Apple is introducing checks of files and photos shared through public iCloud links. The company will be able to review and remove suspicious content and, in certain cases, even suspend user accounts and involve law enforcement agencies.
The new rules will take effect with the release of iOS, iPadOS, macOS, and visionOS version 27.3 or later. They will apply to content shared through the “Anyone with the Link” feature, which allows anyone with the corresponding URL to access a file.
According to Apple’s official explanation, the company will scan such content for harmful material. However, the changes will not apply to files shared using the “People you choose” option, as these can only be accessed by individuals invited or approved by the owner.
The rules cover, among other things, photos stored in iCloud Photos and documents in iCloud Drive. When sharing such content, users can either send a copy of a file or generate a link for shared access. Only the latter option, when configured for public access, will be subject to the new scanning rules.
Apple explained that when users create a link accessible to anyone, the shared content is no longer protected by end-to-end encryption. This applies even if the owner or other participants have enabled Advanced Data Protection, iCloud’s enhanced data security feature.
In practice, sharing content through a public link means that it can be accessed not only by people who receive the URL but also by Apple itself. This technical distinction is what allows the company to scan the content.
However, this does not mean Apple gains the same level of access to all users’ private files. The new rules apply to a specific method of sharing content, rather than everything stored in iCloud.
If the system detects content that Apple considers harmful, the company reserves the right to move, reject, modify, or remove it at any time.
In addition to restricting individual files, Apple may take action against users. The company can suspend or deactivate an existing Apple Account and prevent users from creating a new account using an associated email address or phone number. Apple may also contact law enforcement authorities when necessary.
However, the company has not yet clarified exactly what it considers harmful content. As The Register reports, this category could potentially include child sexual abuse material (CSAM), malware, and other illegal content. Apple has not published an official list of prohibited materials, leaving the exact criteria for scanning unclear.
Despite announcing the new rules, Apple has not disclosed the technical mechanisms behind the scanning process. In particular, it remains unclear whether publicly shared files will be analyzed by automated systems or whether human moderators will be involved.
Apple has also not specified how violations will be identified or whether human review will be part of decisions involving suspicious content. The lack of these details raises questions about the scope of content scanning and the possibility of errors during moderation.
The new rules are linked to the iOS 27.3 update, whose developer beta was released on November 3, 2026. The public release is expected in December. Similar changes are planned for iPadOS, macOS, and visionOS.
As a result, iCloud users who share content through public links should be aware that Apple will be able to inspect those materials. Meanwhile, files shared privately with selected individuals will not be subject to the new scanning rules. The main unanswered question is what criteria Apple will use to identify harmful content and who will oversee the process.
