IntermediateUpdated 2026/08/09

A Law That Applies Where I Do Not Live — How Does It Reach Me?

Usually not by arresting anyone, but by making you price the risk yourself. An extraterritorial law can work without ever being enforced, through decisions taken by academics, journalists, and legal departments — decisions that are never recorded as events.

Of the four bases, only one has anything to do with what you said

Basis	What it claims	How it actually reaches you	When you run into it
NationalityYou are ours, therefore we reach you	Jurisdiction over its nationals’ conduct wherever that conduct occurs.	It depends on whether they recognise your other nationality. Dual nationals face the most complexity — some states recognise neither renunciation nor a second passport.	On entering or transiting the country, and when applying for documents connected to it in a third country.
Where the conduct occurredIt happened here	Jurisdiction over conduct inside its territory — the most traditional basis and the least contested.	Directly. With the person or the asset inside the territory, enforcement needs no additional legal instrument — which makes this the most practical of the four.	When you have a local subsidiary, local employees, or property there.
EffectsWhat you did abroad affected us	Jurisdiction over conduct abroad on the ground that it produced effects at home. The broadest basis, and the easiest to extend.	Usually it cannot reach you at all, absent some other enforceable point of contact. Its real function is not prosecution but making it impossible to determine in advance whether you are in breach.	Potentially always — which is the point. When the definition is vague, whether you have crossed it cannot be answered, and what cannot be answered gets avoided.
Channels passed throughYou used our currency, servers, or technology	Jurisdiction over transactions that use its clearing system, its servers, or products containing its technology.	Through the gatekeepers of the channel — banks, cloud providers, suppliers. Their compliance departments are more efficient than any court, because they need prove nothing and can simply decline the business.	Precisely when you believed you had no dealings at all. This basis removes the defence of never having dealt with them.

The subject is easily misread as a question of position — “I stay out of politics, so I am fine.” Laid out, the four bases show exposure following from nationality, itinerary, and where assets sit, and three of them have nothing to do with what anyone said.

The middle column is the practically useful one: writing a claim into a statute costs nothing, but reaching an actual person requires an actual point of contact. The effects row can reach almost nobody and may still be the most consequential — because its function is not prosecution but making it impossible to know in advance whether you are in breach. The last row is the most underestimated: the enforcers are not courts but the compliance departments of banks and cloud providers, and they need prove nothing — only decline.

Source: Impactful Creative, compiled from the jurisdictional bases described on this page and our coverage of China’s ethnic unity law, Thailand’s nominee-shareholder crackdown, and secondary sanctions

What makes a law extraterritorial?

A law becomes extraterritorial when it claims authority over conduct that is neither inside its territory nor by its nationals.

The claim usually rests on one of four bases: the actor’s nationality, where the conduct occurred, the effects it produced, or whether the transaction passed through a domestic channel — clearing in the currency, transiting a server, using a product containing domestic technology. The last has become the most consequential, because it removes the defence of never having dealt with them at all.

Extraterritoriality is neither rare nor inherently improper. Anti-corruption, antitrust, and sanctions regimes all reach abroad, as do most countries’ tax laws. What differs is how precisely the offence is defined — a clearly drawn extraterritorial law lets people determine in advance whether they are in breach, and a vague one does not. That difference determines what the law is actually doing.

If it has never been enforced, why does it matter?

Because what it wants is not a verdict but a change in behaviour — and that only requires the possibility of application to be real.

The mechanism is direct: a vague provision makes any given case impossible to assess in advance, and what cannot be assessed is rationally avoided. A researcher drops a topic, a publisher asks for one more legal opinion, a company adds a disclaimer, a traveller cancels a transit. Each decision is small on its own, and none is recorded as an event.

That is the deepest difference from ordinary law. Ordinary law produces its effects through enforcement, which can be counted. This produces its effects through expectation, and there is no denominator. You never learn how many articles were not written.

Which places it in the same family as grey-zone operations: no single step amounts to an identifiable incident, and the accumulation is the objective. Only the domain has changed, from the sea to the law.

Who is actually exposed?

Exposure is set not by your views but by your travel, your nationality, and where your assets are — a point that is often inverted.

The highest risk usually attaches not to the most outspoken people but to the most mobile: researchers whose routes transit particular airports, people with family or property there, dual nationals, and employees of companies with a local entity. However severe the text, it needs a reachable subject, and reachability in practice means a person, an asset, or a transaction entering that jurisdiction at some moment.

Corporate exposure tends to sit where it is least expected: personal risk to local staff, director liability in a local subsidiary, licences requiring local approval, and customs or inspection that can simply be slowed. These overlap heavily with the levers of economic coercion, because none of them requires changing a rule — only changing the frequency and speed of enforcement.

And the most vulnerable are usually those with no institution behind them: independent researchers, freelance writers, small publishers. Large organisations have counsel to assess the risk; an individual has only themselves — so the chilling effect appears there first.

What kind of protection actually works?

Useful protection shares one property: at the moment of decision, the person knows they are not carrying it alone. A statement cannot do that; an institutional arrangement can.

Four kinds in particular. First, converting individual exposure into institutional exposure — the institution puts its name on the work, carries the legal costs, and handles the response. An individual facing cross-border litigation backs down; an institution usually does not. Second, advance guidance on travel and transit routes, because most realised risk occurs while moving, and movement can be planned.

Third, blocking statutes: domestic rules that forbid firms from complying with particular foreign orders, and make compliance itself a domestic breach. Their value lies less in frequent use than in giving a company something to point to — refusal stops being a choice and becomes an obligation.

Fourth, and most easily overlooked: recording cases and publishing them. Extraterritorial law runs on uncertainty, and every case that is precisely described and logged converts “possible” into “estimable”. A risk that can be estimated no longer deters in the same way.

Only the first of the five steps is taken by the drafter — the rest are done for them

The provision is written vaguelyThe only step the drafter performs
Definitions that preserve interpretive room and a broadly drawn scope. This step costs almost nothing — no resources, no enforcement — and the four that follow all rest on it.
No case can be assessed in advanceWhere the effect begins
The immediate consequence of vagueness is not fear but incalculability. Faced with a risk that cannot be estimated, a rational actor avoids it — not cowardice but the only safe decision under insufficient information.
Institutions start hedgingStill visible
One more legal opinion, one more contract disclaimer, an event made private, a speaker list sent to counsel first. This layer still leaves records, so it can still be observed and discussed — and it is the last place intervention works.
Individuals self-censorNo longer recorded
A topic dropped, a question not asked, a transit cancelled. Each decision is small and taken alone — nobody reports the article they did not write, so this layer does not exist in any statistic.
The absence becomes normalEven the absence goes unnoticed
After a few years certain topics simply have no researchers, certain places no visitors, certain interviews no willing subjects. By then there is no identifiable cause, because the cause never took the form of an event.

Drafting side — almost costlessStill on record — the last place to interveneOff the record — absent from every statistic

The counterintuitive thing about extraterritorial law is that it needs no verdict. Split into five steps, the reason is visible: the drafter supplies only the first, and the other four are completed by the people affected — each of them a rational decision at the time.

The bottom two layers leave no record, which is the point of the figure. Ordinary law produces effects through enforcement and can be counted; this produces effects through expectation and has no denominator — nobody reports the article they did not write. So the place to intervene is the third layer, not the fourth: by the time self-censorship happens there is nothing left to observe. And the third layer needs individual exposure converted into institutional exposure, because self-censorship does not stop because a statement was issued — it stops when the person knows protection is available.

Source: Impactful Creative, compiled from the chilling-effect mechanism described on this page and the glossary entries on extraterritoriality, economic coercion, and grey-zone operations

What does this mean concretely in Taiwan?

Taiwan’s position has a particular feature: several such statutes write residents and institutions here directly into scope, so exposure follows from identity and itinerary rather than from political involvement. That makes “I stay out of politics, so I am fine” an unusually unreliable assumption here.

For institutions, three low-cost things come first: turn travel and transit guidance into written policy rather than word of mouth; confirm whether legal cost support extends to proceedings abroad; and create an internal channel for reporting, so that individuals are not left deciding for themselves whether something counts as serious.

For individuals, the practical point is not to leave the assessment until the week before departure. Itineraries, assets, and where relatives live can all be inventoried in advance, and the value of that inventory is that it turns a vague fear into a specific list. A specific list can be managed; a vague fear can only be obeyed.

Terms used here

Extraterritorial Jurisdiction — A state applying its law to conduct occurring abroad, typically hooked to settlement in its currency, the presence of its technology in a product, or use of its financial and information infrastructure. For companies this means that not operating in a market is no defence against its law — compliance scope has to be determined by the origin of technology and payment flows, not by where operations sit.
Economic Coercion — Using trade, investment, or market access as leverage to force concessions on non-economic issues. The signature methods are deliberately deniable: quarantine standards abruptly tightened, customs procedures inexplicably slowed, tour groups cancelled — none formally acknowledged as retaliation. That deniability is the design; it denies the target a justiciable dispute at the WTO or elsewhere.
Gray-zone Operations — Coercion deliberately calibrated to stay below the threshold of armed conflict: sustained coast guard presence, maritime militia swarming, water cannon and laser illumination, undersea cable interference, large-scale air incursions. The defining feature is that each individual act is too small to trigger an alliance commitment, making every response look disproportionate. For firms, gray-zone activity is an operating parameter rather than a security headline — it moves shipping insurance rates, cable repair timelines, and regional data center siting decisions.