Legal counsel on privacy, cybersecurity and AI
Modi Deutsch is an Israeli attorney who advises organizations in Israel and abroad on data protection, information security and the governance of artificial intelligence (AI), and serves as an outsourced Data Protection Officer (DPO).
Three practice areas, one method
Privacy & Data Protection
Outsourced DPO services, compliance with Israel's updated privacy law, and support for Israeli companies subject to GDPR, CCPA and other foreign regimes.
Cyber, AI & Compliance
The legal side of information security, frameworks for controlled use of AI, and risk and compliance programs, including support for adopting international standards.
Internet & Technology Law
Online defamation, digital intellectual property, website and app terms, and software and technology agreements.
Working method
Legal accountability
Opinions, policies and agreements written on the assumption that they will be reviewed by a regulator, a customer or a court.
Technical review
The work includes reviewing architecture, access rights, vendors and data flows, to identify gaps between what a policy says and what a system does.
Privilege
Legal advice given by an attorney may be protected by attorney-client privilege, subject to law and circumstances. That matters when reviewing gaps and security incidents.
Israel now requires certain organizations to appoint a DPO
Israel's Privacy Protection Law was substantially amended in 2025 (Amendment 13). Since 14 August 2025, four categories of organizations must appoint a Data Protection Officer. On 14 July 2026, the Israeli Privacy Protection Authority, the country's data protection regulator, published final guidance on the scope of the duty and the officer's required expertise and position.
The firm provides outsourced DPO services to organizations subject to the duty, and to those that choose a structured privacy function without one.
Who must appoint a DPO in Israel
- Public bodies, and vendors that process data on their behalf.
- Data trading and direct marketing databases of significant size.
- Regular and systematic monitoring of individuals on a significant scale.
- Processing of specially sensitive data on a significant scale.
Regulatory updates
Last updated: 24 September 2026
- 27.7.2026European UnionThe AI Act amendment (Regulation (EU) 2026/1744) enters into force, deferring high-risk obligations to December 2027 and August 2028.Source(opens an external website)
- 14.7.2026Israel Privacy Protection AuthorityFinal guidance on DPO appointment.Source (Hebrew)(opens an external website)
- 13.4.2026Israel Privacy Protection AuthorityFinal guidance on transferring personal data abroad based on contractual undertakings.Source (Hebrew)(opens an external website)
- 25.2.2026Israel Privacy Protection AuthorityFinal guidance on consent under Israeli privacy law.Source (Hebrew)(opens an external website)
How well is AI governed in your firm?
Two tools for law and accounting firms. No call, no personal details. Your answers stay in your browser.
Modi Deutsch
Israeli attorney and Data Protection Officer. Holds LL.B. and M.A. degrees in law, has completed Data Protection Officer (DPO) and CISO training at the Magid Institute of the Hebrew University, and is a member of the Israel Bar Association's Law, Technology and Cyber Committee.
Privacy Minute
A short weekly newsletter on privacy, security and AI: one development, one practical takeaway. Currently published in Hebrew.
This site does not collect data about you
No tracking cookies, analytics, pixels or forms that send data to a server. It is the principle we recommend to clients: collect only what you need.
Book a call
Reach out by phone, WhatsApp or email. A short description of your organization and the issue is enough for a first contact. No documents or personal data needed.