Masha Yudashkin

Adv. Masha Yudashkin advises private and public sector clients on AI regulation, data privacy, and cybersecurity compliance. She works closely with technology companies and startups to navigate complex regulatory environments, including the EU AI Act and cross-border AI governance standards (NIST, ISO 42001, etc.). Masha also serves as an external Data Protection Officer (DPO) and AI Compliance Officer, providing practical, forward-thinking legal support.

Furthermore, Masha helps businesses implement AI governance frameworks tailored to legal and operational needs, based on international frameworks and standards. She advises on commercial contracts related to AI systems, with particular emphasis on intellectual property, liability, and regulatory compliance. Her work supports organizations in meeting obligations tied to AI-driven data processing, algorithmic transparency requirements, and responsible deployment. Her ongoing training in AI ethics, governance, and global compliance enables her to stay at the forefront of regulatory developments.

Masha counsels clients on a wide range of privacy compliance matters, including data protection impact assessments (DPIAs), international data transfers, consent mechanisms, Israeli Privacy Law (Amendment 13) compliance, and the development of privacy policies aligned with global requirements. She also advises on cybersecurity governance, breach preparedness, and response strategies, and represents clients in interactions with regulatory authorities. Her experience includes consulting on internal investigations and mitigating legal risks following security incidents.

In addition to the above frameworks, Masha advises on compliance with the EU Data Act and the Digital Services Act (DSA), assisting clients with data sharing mandates, platform accountability, and user rights. She also offers guidance on US privacy regulations, including HIPAA for health data and state-level laws such as the CCPA and CPRA. Her cross-border expertise ensures clients can operate confidently within overlapping regulatory landscapes.

Before joining Barnea, Masha served in the Military Prosecution, where she gained extensive legal and regulatory experience in cybercrime, digital forensics, and internal governance programs.