Apple to Scan Public iCloud Shares Starting iOS 27.3, Disabling E2EE

The change targets shares set to Anyone with the Link in iCloud Photos and Drive. Apple's support document states these links make content accessible to the company itself and removes E2EE protections. Uploads flagged as harmful can trigger account blocks or law enforcement referrals. The policy applies to new links after the December rollout but leaves retroactive checks unspecified.

Procurement and prior Apple filings show this fits a pattern of server-side inspection on non-E2EE surfaces. The 2021 CSAM scanning proposal used similar on-device matching language before withdrawal; public links now provide the same inspection point without on-device changes. No independent technical confirmation exists for what constitutes harmful content or how detection models are trained.

Official statements emphasize user choice in disabling E2EE, yet the update coincides with rising public-link abuse reports in breach data. Contract records from prior iCloud security updates indicate scanning infrastructure already exists for enterprise compliance. Users shifting to private shares or third-party E2EE tools will test whether the policy expands beyond public links.

Next indicators include updated App Store review guidelines and any new CVE disclosures tied to the scanning pipeline. Watch for changes in iCloud keychain telemetry or developer beta logs after 27.3 ships.