> If I'm operating a service in eg Brazil, I have zero obligation to comply with EU law (depending on treaties of course) this is not actually true. There are

> If I'm operating a service in eg Brazil, I have zero obligation to comply with EU law (depending on treaties of course) this is not actually true. There are lots of examples, but the best two are probably: Yahoo (a US company operating entirely in the US) being forced to stop users from selling Nazi memorabilia because it's illegal in France. Kim Dotcom fighting extradition to the US from New Zealand, for Mega. Everything he did is perfectly legal in New Zealand, but that doesn't seem to matter to the US legal system. If your service reaches EU customers, then the EU will apply their laws to your service. If you break those laws, then you may find yourself facing legal problems (extradition if available, from Brazil or any country you travel to that has an extradition treaty with the EU).