Apple to Scan Public iCloud Links for Harmful Content in iOS 27.3

Apple Updates iOS 27.3 to Scan Public iCloud Links

Starting with iOS 27.3, Apple will monitor public links shared via iCloud, ZDNET reported. The policy, detailed in an official support document published on November 3, targets photos, files, and other items shared using the “Anyone with the Link” option.

The Tech TL;DR:

• Public iCloud links created with the “Anyone with the Link” setting will be scanned for harmful content in iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3.
• End-to-end encryption is stripped from items shared publicly via links, even if Advanced Data Protection is enabled.
• Violations can result in content deletion, disabled Apple Accounts, blocked email addresses or phone numbers, and potential law enforcement involvement.

Platform Updates Across Apple Operating Systems

The changes arrive as part of the upcoming 27.3 software cycle. MacRumors noted that the software is currently available to developers for beta testing and will see a public release in December. Beyond iOS 27.3, the policy update applies across iPadOS 27.3, macOS 27.3, and visionOS 27.3.

When users share content stored in iCloud, such as items in iCloud Photos or iCloud Drive, they select between two sharing permissions. The setting designated as “People you choose” keeps end-to-end encryption intact, restricting access to invited users and keeping files hidden from Apple. Conversely, selecting “Anyone with the Link” makes the shared file accessible to anyone who opens the URL, including Apple.

Public Sharing Removes End to End Encryption

TechRepublic pointed out that items shared through public links lose their end-to-end encryption, a limitation that occurs to support the sharing mechanism itself rather than being a newly introduced encryption change. Once a link is published under the public designation, Apple explicitly reserves the right to move, refuse, modify, remove, or delete the content at any time.

# Example: Checking iCloud sharing status in terminal (conceptual)
# Advanced Data Protection status vs. public link exposure
scutil --nc status iCloudSharing
icloud-drive --inspect-link-permissions --target "Anyone with the Link"

If content violates Apple’s policies, the company outlines strict potential measures. These include blocking or disabling the associated Apple Account, blocking the ability to create new accounts using the same phone number or email address, and involving law enforcement.

Unanswered Questions Regarding Harmful Content Definitions

Despite the policy rollout, significant ambiguities remain for developers and everyday users. ZDNET highlighted that Apple’s announcement did not explain what constitutes “harmful content” in practice. While obvious violations include illegal drug sales or child sex abuse material, the vagueness of the policy leaves room for concern. MacRumors added that Apple has not clarified whether automated systems or human reviewers will examine the files, nor whether checks occur at the moment of link creation or afterward.

The support documentation fails to detail a direct appeals process for accounts or content flagged incorrectly under this specific policy, though existing web pages provide frameworks to push back for other account restrictions. Users seeking stricter control over their files are advised by TechRepublic to rely on restricted recipient permissions rather than generating open web links.

Upcoming Public Release and Deployment Schedule

Apple seeded the release candidate for iOS 27.2 to developers ahead of the broader 27.3 deployment. With the 27.2 update bringing expanded Siri AI capabilities and unified versioning across iPhone models, attention shifts toward the December rollout of version 27.3, which will officially activate the new public link monitoring protocols.

Always consult with certified IT and cybersecurity professionals before altering enterprise networks or handling sensitive data.