Basically yes. "any systems, networks, or applications located in Belgium". Of course you might still be prosecuted outside Belgium, e.g. if you pentest an Ora

Basically yes. "any systems, networks, or applications located in Belgium". Of course you might still be prosecuted outside Belgium, e.g. if you pentest an Oracle setup in Belgium, and Oracle takes issue and files charges against you in the US. But that is less likely to happen or succeed.