Legal writings
Books; book chapters; articles; blogs; studies; video lectures presentations and testimonies; interviews
Books
The EU General Data Protection Regulation: A Commentary (edited by Christopher Kuner, Lee Bygrave and Christopher Docksey) (Oxford University Press 2020); free update published 4 May 2021
Handbook on Data Protection and Humanitarian Action (co-editor with Massimo Marelli), joint publication of the Brussels Privacy Hub and the International Committee of the Red Cross (ICRC), 30 June 2017; second edition published 3 June 2020
Daniel Cooper and Christopher Kuner, “Data Protection Law and International Dispute Resolution”, 382 Recueil des cours/Collected Courses of the Hague Academy of International Law 9-174 (2017)
Transborder Data Flows and Data Privacy Law (Oxford University Press 2013)
European Data Protection Law: Corporate Compliance and Regulation (2nd edition, Oxford University Press 2007); Chinese version published in 2008 by Law Press China
European Data Privacy Law and Online Business (Oxford University Press 2003)
Internet für Juristen (Verlag C.H. Beck 1996, 2nd edition 1999)
Book chapters
Recht der Datenverschlüsselung im Internet (Chapter in loose-leaf collection "Multimediarecht", edited by Hoeren/Sieber, Verlag C.H. Beck) (1999)
Articles
See the full text of my articles posted on the Social Sciences Research Network (SSRN)
Protecting EU Data Outside EU Borders Under the GDPR, vol. 60, no. 1 Common Market Law Review 77-106 (2023) (available behind paywall on journal’s web site)
The Path to Recognition of Data Protection in India: The Role of the GDPR and International Standards, vol. 33 no. 1 National Law Review of India, pp. 69-91 (2021), https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3964672
Territorial Scope and Data Transfer Rules in the GDPR: Realising the EU’s Ambition of Borderless Data Protection, University of Cambridge Faculty of Law Research Paper No. 20/2021, 16 April 2021, https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3827850
The GDPR and International Organizations, 114 American Journal of International Law Unbound 15-19 (2020) (full text)
International Organizations and the EU General Data Protection Regulation: Exploring the Interaction between EU Law and International Law, 16 International Organizations Law Review 158-191 (2019) (available behind paywall on journal’s web site)
International agreements, data protection, and EU fundamental rights on the international stage: Opinion 1/15 (EU-Canada PNR), vol. 55 no. 3 Common Market Law Review 857-882 (2018) (pre-edited, non-final version available on SSRN)
International Organizations and the EU General Data Protection Regulation, University of Cambridge Faculty of Law Research Paper No. 20/2018, https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3050675
Reality and Illusion in EU Data Transfer Regulation Post Schrems, 18 German Law Journal 881 (2017) [full text]
The Internet and the Global Reach of EU Law, LSE Legal Studies Working Paper No. 4/2017, University of Cambridge Faculty of Law Research Paper No. 24/2017, https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2890930
Reality and Illusion in EU data transfer Regulation Post Schrems, pre-publication version, University of Cambridge Faculty of Law Research Paper No. 14/2016
Extraterritoriality and regulation of international data transfers in EU data protection law, 5 International Data Privacy Law 235-245 (2015) (pre-publication version available at http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2644237)
Google Spain in the EU and international context, 22 Maastricht Journal of European and Comparative Law 158-164 (2015)
The Court of Justice of the EU Judgment on Data Protection and Internet Search Engines, London School of Economics and Political Science (LSE) Law, Society, and Economy Working Paper Series, 28 March 2015 [full text]
Data nationalism and its discontents, Emory Law Journal Online, 13 March 2015 [full text]
The European Union and the Search for an International Data Protection Framework, vol 2 no 2 Groningen Journal of International Law 55 (2014) [full text]
The Proposed EU Data Protection Regulation Two Years Later, BNA Privacy and Security Law Report (2014) January 6 2014, pages 1-6 [co authors: Anna Pateraki and Cédric Burton] [full text]
The Proposed EU Data Protection Regulation One Year Later: the Albrecht Report, BNA Bloomberg Privacy and Security Law Report (2013) January 21 2013, pages 1-7 [co-authors: Anna Pateraki and Cédric Burton] [full text]
The European Commission’s Proposed Data Protection Regulation: A Copernican Revolution in European Data Protection Law, BNA Bloomberg Privacy and Security Law Report (2012) February 6 2012, pages 1-15 [full text]
Data Protection Law and International Jurisdiction on the Internet (Part 2), 18 International Journal of Law and Information Technology (2010) 18(3) 227
Data Protection Law and International Jurisdiction on the Internet (Part 1), 18 International Journal of Law and Information Technology (2010) 18(2) 176
The New EU Standard Contractual Clauses for International Data Transfers to Data Processors, 2010 BNA Privacy & Security Law Reporter, April 19, 2010, p. 1
The European Roots of Data Protection Law, (2010) 20 Computers and Law (C&L), issue 5, p. 8
An International Legal Framework for Data Protection: Issues and Prospects, (2009) 25 Computer Law and Security Review, p. 307
Onward Transfers of Personal Data under the US Safe Harbor Framework, 2009 BNA Privacy & Security Law Reporter, August 17, 2009, p. 1 [full text]
Proportionality in European Data Protection Law and its Importance for Data Processing by Companies, 2008 BNA Privacy & Security Law Reporter, November 10, 2008, p. 1615
Data Protection and Rights Protection on the Internet: The Promusicae Judgment of the European Court of Justice, 2008 European Intellectual Property Review, p. 199
Membership in the U.S. Safe Harbor Program by Data Processors, 2008 BNA Privacy & Security Law Reporter, May 12, 2008, p. 723 [full text]
Privacy, Security and Transparency: Challenges for Data Protection Law in a New Europe, (2005) 16 European Business Law Review, p. 1
Die alternativen Standardvertragsklauseln der EU für internationale Datenübermittlungen, 2005 Recht der Datenverarbeitung 193 [co-author: Dr. Jörg Hladjk]
The Whistleblower Hotline Quandary, Financial Industry Executive, November 2005, p. 47 [co-authors: Aaron Simpson and Lisa Sotto]
The E.U. Alternative Standard Contractual Clauses for International Data Transfers, BNA World Data Protection Reporter, February 2005, p. 17
The Commission’s First Report on Implementation of the E.U. Data Protection Directive, BNA World Data Protection Reporter, August 2003, p. 8
Challenges for Review of the EU Data Protection Directive, Datenschutz und Datensicherheit 553 (2002)
Business Proposes Alternative Model Contract Clauses, E-commerce Law and Policy 12 (October 2001)
EU Regulations Threaten International Data Flows, International Technology Law Review 39 (June 2001)
Beyond Safe Harbor: European Data Protection Law and Electronic Commerce, 35 International Lawyer 79 (2001)
Das Signaturgesetz aus internationaler Sicht, 1997 Computer und Recht 643
Die neuen „Crypto Regulations“ der USA und die deutsche „Kryptopolitik“, 1997 NJW-Computerreport 221
Internationale Zuständigkeitskonflikte im Internet, 1996 Computer und Recht 453 (cited by the German Federal Supreme Court (Bundesgerichtshof) in a leading case on international jurisdiction, Decision of December 12, 2000, 1 StR 184/00)
Digitale Unterschriften im Internet-Zahlungsverkehr: Rechtliches in Deutschland und USA, 1996 NJW-Computerreport 108
Rechtliche Aspekte der Datenverschlüsselung im Internet, 1995 NJW-Computerreport 413
Die neuen WIPO-Schiedsregeln, 1995 Recht der internationalen Wirtschaft 965
Das US-amerikanische Recht betreffend sexueller Belästigung—Ein Überblick für deutsche Unternehmen, 1995 Wirtschaftsrechtliche Beratung 421
Fallstudie zum Vorgehen bei Beschwerden oder Klagen wegen sexueller Belästigung in den USA, 1995 Wirtschaftsrechtliche Beratung 445
Internet News [Rubrik], NJW-Computerreport 1995-1998
Das Internet für Juristen, 1994 NJW-Computerreport 369-373
Die neuen internationalen Handelsschiedsgesetze der US-amerikanischen Einzelstaaten, 1994 Recht der internationalen Wirtschaft 368-370
Zur völkerrechtswidrigen Entführung nach US-amerikansichem Recht/Die Alvarez-Machain-Entscheidung des US Supreme Court, 1993 Europäische Grundrechte Zeitschrift 1-5
Fremdwährungsurteile in New York, 1992 Recht der internationalen Wirtschaft 473-74
Blogs
Strengthening Data Protection Resilience Against Geopolitical Threats: A Call to Action, Verfassungsblog, 24 June 2026
The Draghi Dilemma: The Right and the Wrong Way to Undertake GDPR Reform, Future of Privacy Forum Blog, 23 October 2025
Geopolitical fragmentation, the AI race, and global data flows: the new reality (with Gabriela Zanfir-Fortuna), Future of Privacy Forum Blog, 26 February 2025
Strengthening the EU Legal Edifice for Data Transfers, Verfassungsblog, 29 August 2024
International Data Transfers after Five Years of the GDPR: Postmodern anxieties, EU Law Live, 5 May 2023
Exploring the awkward secret of data transfer regulation: the EDPB Guidelines on Article 3 and Chapter V GDPR, European Law Blog, 13 December 2021
Schrems II Re-Examined, Verfassungsblog, 25 August 2020
The Schrems II judgment of the Court of Justice and the future of data transfer regulation, European Law Blog, 17 July 2020
Data crossing borders: Data Sharing and Protection in Times of Coronavirus, Verfassungsblog, 15 April 2020
The Coronavirus Crisis and EU Adequacy Decisions for Data Trannsfers (with Christopher Docksey), European Law Blog, 3 April 2020
International data transfers, standard contractual clauses, and the Privacy Shield: the AG Opinion in Schrems II, European Law Blog, 7 January 2020
Data Protection, Data Transfers, and International Agreements: the CJEU’s Opinion 1/15, Verfassungsblog, 26 July 2017
The Internet and the global reach of EU law, LSE Business Review Blog, 18 July 2017
Creating International Frameworks for Data Protection: The ICRC/Brussels Privacy Hub Handbook on Data Protection in Humanitarian Action, EJIL: Talk!, 13 July 2017 (co-author: Massimo Marelli), reposted on the Information Law and Policy Centre Blog on 1 August 2017
Third Country Law in the CJEU’s Data Protection Judgments, European Law Blog, 12 July 2017, reposted on Conflictoflaws.net on 17 July 2017
The Growing Importance of Data Protection in International Law, EJIL: Talk!, 14 October 2015
A Chekhovian view of privacy for the Internet age, OUPblog, Oxford University Press, 13 October 2015
The Sinking of the Safe Harbor, Verfassungsblog, 8 October 2015
Safe Harbor in stormy seas: the Advocate General Opinion in Schrems, Blog of the Cambridge Journal of International and Comparative Law, 29 September 2015
Data Protection in International Organizations and the New UNHCR Data Protection Policy: Light at the End of the Tunnel? (with Alexander Beck), EJIL: Talk!, 31 August 2015
Safe Harbor before the EU Court of Justice, Blog of the Cambridge Journal of International and Comparative Law, 13 April 2015
A new era begins at the EDPS, IAPP Privacy Perspectives, 3 March 2015
The new EDPS: good news, but more work to do, IAPP Privacy Perspectives, 1 December 2014
We actually lost the crypto wars, LSE Media Policy Project Blog, 12 November 2014
U.S. Warrants for Overseas Data Trample Foreign Privacy Laws, MIT Technology Review, 22 August 2014
The data retention judgment, the Irish Facebook case, and the future of EU data transfer regulation, Concurring Opinions, 19 June 2014
EU and US data privacy rights: six degrees of separation, Concurring Opinions, 9 June 2014
The right to be forgotten and the global reach of EU data protection law, Concurring Opinions, 1 June 2014
The Court of Justice of the EU's Judgment on the "Right to be Forgotten": an International Perspective, EJIL: Talk!, 20 May 2014
Can Data Protection Survive if the EU Breaks UP?, IAPP Privacy Perspectives, April 28, 2014
The Future of Global Privacy: Conflict or Harmony?, Daniel Solove LinkedIn Blog, April 21, 2014
European Court gives a Boost to EU Data Protection Reform , IAPP Privacy Perspectives, April 9, 2014
The Global Competition between Privacy Models, IAPP Privacy Perspectives, March 12, 2014
Rethinking European data protection law, OUPblog, Oxford University Press, January 28, 2014
The Baffling Case of the Headless EDPS, IAPP Privacy Perspectives, January 15, 2014
Extraterritoriality and the Fundamental Right to Data Protection, EJIL: Talk!, December 16, 2013
Requiring local storage of Internet data will not protect privacy, OUPblog, Oxford University Press, December 6, 2013
Legal Reform Is Needed on Both Sides of the Atlantic, Not Just in Europe, IAPP Privacy Perspectives, December 2, 2013
Parallel Privacy Universes and PRISM, IAPP Privacy Perspectives, July 30, 2013
Government data surveillance through a European PRISM, OUPblog, Oxford University Press, June 15, 2013 (also posted at the London School of Economics EUROPP blog on June 22, 2013, under the title The revelations over PRISM show that we need a stronger political committment to privacy in Europe)
The Transatlantic Divide over Data Privacy Rights, IAPP Privacy Perspectives, May 20, 2013
Where Is the Regulation of Transborder Data Flows Headed?, IAPP Privacy Perspectives, April 23, 2013
You Just Don't Understand': The Current EU-U.S. Privacy Battles, IAPP Privacy Perspectives, February 28, 2013
The global data privacy power struggle, OUPblog, Oxford University Press, January 28, 2013
Studies
'Regulation of Transborder Data Flows under Data Protection and Privacy Law: Past, Present, and Future', OECD Digital Economy Papers, No. 187 (OECD Publishing 2011) [full text]
Study for DG Internal Market of the European Commission on Online Copyright Enforcement and Data Protection in Selected Member States (April 2010; follow-up to November 2009 study) [full text]
Study for DG Internal Market of the European Commission on Online Copyright Enforcement and Data Protection in Selected Member States (November 2009) [full text]
OECD Study on “Report on Compliance with, and Enforcement of, Privacy Protection Online”, February 12, 2003 [full text]
Video lectures, presentations, and testimony
Video lecture on global data protection law at the St. Petersburg International Legal Forum Academy, St. Petersburg, Russia, May 2018
Interviews
Interview with Goldman Sachs about the EU General Data Protection Regulation (GDPR), April 2018