Liav Shapira

Liav is a partner in the firm's Privacy, Cyber and AI Department.

Adv. Liav Shapira provides comprehensive legal counsel to a wide range of clients, including startups, multinational corporations, and public entities, with a focus on privacy compliance, AI regulation, and mitigating cybersecurity risks.

Liav’s expertise encompasses navigating complex Israeli and European privacy frameworks, including GDPR compliance. He assists organizations in developing and implementing privacy programs, conducting data protection risk assessments, managing and securing databases, and preparing tailored policies, protocols, and agreements.

With extensive experience in regulatory engagement, Liav adeptly interacts with authorities, prepares authoritative legal opinions, and guides clients through intricate regulatory landscapes to achieve practical, business-oriented solutions.

Education:

Reichman University, LL.B. and B.A. in Business Administration - Marketing, 2008

Admission:

Israel Bar Association, 2010

Insights & News - Liav Shapira:

August 25, 2026

AI in Organizations: No Longer Enough to Say “Do Not Input Confidential Information”

Organizations can benefit significantly from AI tools, but legal and operational risks begin the moment information is entered. Managing those risks requires looking beyond storage or training and focusing on the full data lifecycle: what was entered, where it flowed, who had access to it, and how the output was used.

See full article >

July 22, 2026

Position Statement on the Obligation to Appoint a DPO: Not a Change in the Law, but a Change in the Rules of the Game

Israel’s Privacy Protection Authority (PPA) has published the final version of its position statement on the appointment of a data protection officer (DPO). Although, formally speaking, it is only a position statement rather than binding guidance, it is expected to have a significant practical impact on the PPA’s supervision and enforcement going forward.

Israel’s Privacy Protection Authority Issues Position Statement on Consent to Processing of Personal Data and Its Implications for Organizations

In its final position statement, the PPA presents a stricter interpretation of the law that more closely aligns with the approach used in European law (the GDPR), under which data subjects must issue active, free, and informed consent. At the same time, the PPA limits the possibilities of relying on the concept of “tacit consent” found in the law.

See all news updates from Liav Shapira >

Practice areas:

Privacy and Data Protection