Apple will check shared iCloud links for ‘harmful content’

Apple announced that, beginning with the 27.3 update across its major operating systems, any iCloud file or folder shared using the “Anyone with the Link” setting will be accessible to Apple’s moderation system. The company’s support note says it will look for “harmful content” and reserves the right to move, modify, delete, or block the material, as well as to suspend accounts or involve law enforcement. The policy shift also means those shared items will no longer benefit from Apple’s end‑to‑end encryption, a technical change that directly affects users who rely on the privacy of link‑based sharing.

The move arrives amid mounting pressure from advocacy groups demanding that Apple take a firmer stance against child sexual abuse material stored in its cloud services. Historically, Apple has positioned itself as a privacy‑first platform, refusing to scan user data in the same way that Google or Meta do for ad targeting. By limiting the scan to only publicly shareable links, Apple attempts to balance its privacy branding with regulatory and societal expectations. The timing coincides with the rollout of the first 27.3 developer betas and a scheduled public release in December, suggesting the company is aligning the feature with its regular software cadence rather than a rushed emergency patch.

If Apple’s scanning infrastructure proves effective, it could set a precedent for other privacy‑focused firms to adopt selective content moderation without a blanket loss of encryption. However, the loss of end‑to‑end protection for shared links may trigger user backlash, especially among privacy advocates and enterprise customers who depend on iCloud for secure collaboration. Watch for legal challenges or legislative scrutiny that could force Apple to broaden the scanning scope, as well as any technical glitches that might cause false positives and accidental account bans. The real test will be how Apple communicates the policy, enforces it without overreach, and whether the trade‑off between safety and privacy satisfies both regulators and its user base.