Apple to Scan Public iCloud Links Starting with iOS 27.3

Qué ocurrió

Starting with iOS 27.3 (and the same version for iPadOS, macOS, and visionOS), Apple will automatically scan any file, photo, or document that is shared using the “Anyone with the Link” option in iCloud. The scan looks for “harmful material” and may lead to removal of the content or action against the account. Apple has not disclosed whether the scan is performed by automated tools, human reviewers, or a hybrid approach, nor when the scan occurs. Private iCloud data that is not shared via a public link remains end‑to‑end encrypted.

Por qué es importante para la confianza y el cumplimiento

• The new scanning policy creates a control‑monitoring requirement for any organization that uses public iCloud links, making it essential to document sharing policies, classify public‑link data, and retain evidence for audit readiness.
• Provides a concrete control‑monitoring scenario that maps to privacy and data‑security objectives across frameworks.
• Enables organizations to collect defensible evidence (sharing‑settings logs, policy attestations) for audit and compliance reviews.

Who is affected

Recommended actions

1. Catalog all iCloud public‑link shares and assess the sensitivity of the data involved.
2. Update data‑handling policies to require justification and monitoring for any public‑link sharing.
3. Capture and retain screenshots or system logs of sharing settings as audit evidence.
4. Adopt end‑to‑end‑encrypted alternatives for confidential files.