Courts 

Court of Justice of the European Union (CJEU): ‘Foreign Nationals and Data Protection Law: a Transatlantic Analysis’, in: Hielke Hijmans and Herke Kranenborg (eds), Data Protection Anno 2014: How to Restore Trust? 213-224 (intersentia 2014), cited by Advocate General Bot in his Opinion in Case C-362/14 Schrems, 23 September 2015, footnote 91 

High Court of Ireland: European Data Protection Law: Corporate Compliance and Regulation (2nd edition, Oxford University Press 2007), pp. 72-73, cited by Mr. Justice Keane in In the Matter of Mount Carmel Medical Group (South Dublin) Limited (in Liquidation) and in the Matter of the Companies Acts 1963 to 2012, 7 July 2015, [2015] IEHC 450, para. 54 

Court of Justice of the European Union: Advocate General Cruz Villalón citing Data Protection Law and International Jurisdiction on the Internet Part 1 (18 International Journal of Law and Information Technology (2010) 18(2) 176-193), in his Opinion in Case C-230/14 Weltimmo, 25 June 2015, footnote 29

German Federal Supreme Court (Bundesgerichtshof): citing Internationale Zuständigkeitskonflikte im Internet, 1996 Computer und Recht 453-458, cited in Urteil vom 12. Dezember 2000, 2000, 1 StR 184/00, p. 21

US District Court for the Eastern District of New York: U.S. Senior District Judge Jack Weinstein citing Personal Jurisdiction Based on the Presence of Property in German Law: Past, Present, and Future, 5 Transnational Lawyer 691 (1992), in Simon v. Philip Morris, Inc., 86 F. Supp. 2d 95, 136 (E.D.N.Y. 2000)

Data protection authorities (DPAs) 

European Data Protection Board (EDPB): citing International Organizations and the EU General Data Protection Regulation, University of Cambridge Faculty of Law Legal Studies Research Paper Series, Paper 20/2018, in Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation, 5 May 2025, p. 6

Turkish Data Protection Authority: citing my commentaries on GDPR Article 47 (Binding Corporate Rules) and Article 49 (Derogations) in Kuner, Bygrave, and Docksey (eds.), The
EU General Data Protection Regulation (GDPR): A Commentary, Oxford University Press 2020, in its Data Transfer Abroad Guidelines (2025) (in Turkish), pages 35-37 and 65