Apple Will Scan Shared iCloud Links for Harmful Content, but Won’t Explain What Counts as Harmful

Apple will check photos and files shared through publicly accessible iCloud links for harmful content on devices running its upcoming 27.3 software updates, the company has confirmed.

The policy also gives Apple the authority to remove flagged material, disable accounts and involve law enforcement when necessary, raising questions about how the company will balance content moderation with user privacy.

The change is narrower than a blanket inspection of people's iCloud libraries. It applies to content shared using Apple's 'Anyone with the Link' setting, which allows anyone with the link to access the material without receiving individual approval from its owner.

Apple's iCloud Scanning Policy Targets Publicly Shared Files

Apple's support document, published on 3 November 2026, explains that users sharing photographs and files through iCloud can choose between restricting access to selected people and making content available through a public link.

The first option, 'People you choose', limits access to individuals invited or approved by the person sharing the material.

The alternative, 'Anyone with the Link', removes that individual approval requirement and allows anyone who obtains the link to view the content.

Only content shared through 'Anyone with the Link' will be subject to Apple's new checks. This does not mean the company will routinely scan users' private iCloud libraries.

Apple has also not explained exactly what qualifies as 'harmful content', how its checks will work or whether flagged files will be reviewed by a person before action is taken.

There is another unanswered question for existing users. Apple has not clarified whether public links created before the 27.3 updates will also be subject to the new checks, leaving uncertainty over how the policy will affect previously shared material.

Public iCloud Links Lose End-To-End Encryption

The most consequential part of Apple's announcement concerns encryption. The company explicitly states that content shared through 'Anyone with the Link' will no longer benefit from end-to-end encryption, even when the account owner or other participants have enabled Advanced Data Protection.

That represents an important distinction for customers who assume their existing security settings protect every item shared through iCloud.

Apple's documentation makes clear that Advanced Data Protection does not preserve end-to-end encryption for content distributed through public links.

Apple says the checks are necessary to support public link sharing. However, users who choose this option must accept that their shared files can be accessed for screening.

Those sharing sensitive photographs or documents may prefer to restrict access to selected people, although encryption protections can vary depending on the sharing method.

Apple has not provided a detailed technical explanation of how the new checks operate or precisely what information is examined during the process.

Apple Can Delete Content And Disable Accounts

Apple's updated policy also outlines the enforcement measures it may take when material is identified as harmful. The company reserves the right to move, refuse, modify, remove or delete content that users attempt to upload.

It can also block or disable the associated Apple Account. In certain circumstances, Apple may prevent someone from creating another account using the email address or telephone number associated with the original account.

Apple also says it may involve law enforcement when necessary, but has not explained what would trigger that decision or how users can appeal if their content is incorrectly flagged.

An account suspension is not necessarily automatic, as the company has yet to detail how enforcement decisions will be made.

The Verge reported that the announcement follows calls from protesters for Apple to take stronger action against child sexual abuse material in iCloud. However, Apple has not confirmed this as the sole reason for the policy, which uses the broader term 'harmful content'.

For now, Apple has released the first developer beta versions of its 27.3 software updates, with iOS 27.3 expected in December 2026. However, the company has not clarified how widely the new policy will be implemented, noting that some features may not be available in every country or region.