Will be interesting so see how this shakes out in the courts over the next few decades.
It’s not possible to know the legal jurisdiction of the user represented by an incoming packet with today’s internet.
To me this sounds like a random person in a random country smuggling their data across a boarder into my system without my consent. Have a hard time reconciling my views on privacy and individual freedom with a world where a random country can hold me liable for some random law in their jurisdiction when I never consented to doing business with their citizens.
This is why many websites just block European IP addresses entirely.
You might think you’re safe in the US, but perhaps you use a payment processor with significant European presence? Stripe or Paypal, for example. European authorities can take your money.
This is not sufficient. IP addresses do not have sovereign rights and only loosely correlate with the legal jurisdiction of the user behind the originating packet.
This is a world where, by connecting to the internet and exchanging packets, you are simultaneously liable for every law under every jurisdiction; it’s just a game of roulette which jurisdiction the packet you receive is coming from.
This doesn’t seem scalable, sustainable, or particularly good for human/civil rights.