Liav is a seasoned commercial lawyer specializing in privacy law, data protection, and cybersecurity.
Adv. Liav Shapira provides comprehensive legal counsel to a wide range of clients, including startups, multinational corporations, and public entities, with a focus on privacy compliance, AI regulation, and mitigating cybersecurity risks.
Liav’s expertise encompasses navigating complex Israeli and European privacy frameworks, including GDPR compliance. He assists organizations in developing and implementing privacy programs, conducting data protection risk assessments, managing and securing databases, and preparing tailored policies, protocols, and agreements.
With extensive experience in regulatory engagement, Liav adeptly interacts with authorities, prepares authoritative legal opinions, and guides clients through intricate regulatory landscapes to achieve practical, business-oriented solutions.
Education:
Reichman University, Herzliya (LL.B. and B.A. in Business Administration - Marketing), 2008
Admission:
Member of the Israel Bar Association since 2010
March 2, 2025
Significant Shift in the Israeli Privacy Protection Authority’s Definition of Consent
The Israeli Privacy Protection Authority has issued a new statement introducing a significant change in the interpretation of the law and in the required methods for obtaining consent to the collection and processing of personal data. While the dry wording of the law enabled reliance on tacit or tacit consent, the PPA now clarifies that explicit, informed and free consent must be prioritized.
December 15, 2024
Expansion of Privacy Protection Regulations regarding data from the EEA
As of January 1, 2025, the Israeli Privacy Protection Regulations (Instructions for data being transferred to Israel from the European Economic Area) will also apply to data being stored or processed in Israel or in other countries, such as the US and the UK, if these databases also contain data transferred from Europe. In other words, this means that as soon as a database in Israel or another country also contains personal information transferred from Europe, all data in the database must comply with the regulations’ requirements – not just the data that came from Europe, but also the local data or data that came from other countries.
