Is it really possible to block access from certain countries sufficiently to avoid legal exposure? It's easy enough to spoof one's physical location. Is an organization off the hook if location-based filters are circumvented via VPN etc.?
Court decisions in the US on jurisdiction of cross-border internet postings have been contradictory, and I know of none in non-US countries. Each country gets to rule on jurisdictional matters on its own terms.