Liav Shapira

Liav is a seasoned commercial lawyer specializing in privacy law, data protection, and cybersecurity.

Adv. Liav Shapira provides comprehensive legal counsel to a wide range of clients, including startups, multinational corporations, and public entities, with a focus on privacy compliance, AI regulation, and mitigating cybersecurity risks.

Liav’s expertise encompasses navigating complex Israeli and European privacy frameworks, including GDPR compliance. He assists organizations in developing and implementing privacy programs, conducting data protection risk assessments, managing and securing databases, and preparing tailored policies, protocols, and agreements.

With extensive experience in regulatory engagement, Liav adeptly interacts with authorities, prepares authoritative legal opinions, and guides clients through intricate regulatory landscapes to achieve practical, business-oriented solutions.

Education:

Reichman University, LL.B. and B.A. in Business Administration - Marketing, 2008

Admission:

Israel Bar Association, 2010

Insights & News - Liav Shapira:

August 13, 2025

Amendment 13 to the Israeli Privacy Protection Law is Here! Are You Ready?

Amendment 13, which significantly updates privacy laws in Israel, has come into effect! If you still don't know what to do to comply with the requirements, we've prepared a guide to help you address the main issues (not all of them) right now! In this guide, you can find simple tips to implement in your organization to improve compliance with Israeli privacy law requirements.

A Practical Guide to Board Responsibility and DPO Appointment Under Amendment 13

Amendment 13 to the Israeli Privacy Protection Law is expected to come into effect in mid-August 2025. The amendment prescribes, inter alia, organizations’ obligation to appoint a data protection officer. The Privacy Protection Authority recently published a draft directive on implementing this obligation. The draft is not final and is open for public comments.

DORA for Tech Vendors - What You Should Know (But Haven’t Asked)

DORA (Digital Operational Resilience Act) is an EU regulation that sets rules for how financial entities manage ICT (Information and Communication Technology) risks. It covers areas like cyber resilience, incident reporting, third-party risk, and oversight of critical service providers.

See full article >

See all news updates from Liav Shapira >

Practice areas:

Privacy and Data Protection