1. Introduction 2. The boundaries of the global reach of EU law 3. The EU as an actor in rule-making 4. External norm primacy and EU law : AFSJ directives in the post-Lisbon legislative cycle 5. Tracing transatlantic rule-transfer 6. The EU's cybercrime and cyber-security rule-making 7. The EU's participation in the global legal order : manifestations of sovereignty 8. Conclusion.