With a rapid technology development it becomes easier for individuals to share their personal data. However, this also increases the processing of personal data and the risks of infringements of data protection. With an increasing globalisation the infringements of data protection frequently takes on cross border dimensions making it harder to determine where actions can be brought to enforce the data subject’s data protection rights. This thesis examines the possible ways of interpreting the rule of jurisdiction found in the General Data Protection Regulation (GDPR). Furthermore this thesis investigates the relationship between the GDPR and the Brussels Recast Regulation regarding international jurisdiction over infringements of data protection. After analysing judgements of the court of justice of the European Union and the scope and aims of the Regulations, the general conclusion in the thesis is that both the GDPR and the Brussels Recast Regulation can be applicable on infringements of data protection, provided that the data subject always has the opportunity to bring an action according to the jurisdictional rule of the GDPR. However, there are a lot of uncertainties that demand for an answer. These uncertainties for instance includes the question if, and in that case how, jurisdictional agreements for data privacy is allowed.