How Can a Law From a Country I Do Not Live In Reach Me?

What makes a law extraterritorial?

A law becomes extraterritorial when it claims authority over conduct that takes place outside its territory.

Four bases matter most to individuals and companies: the actor’s nationality, where the conduct occurred, the effects it produced at home or the threat it posed to national security, and whether the transaction passed through a domestic channel, such as clearing in the national currency, transiting a domestic server, or using a product that contains domestic technology. The last has become the most consequential, because it removes the defence of never having done business with that country at all. Claims over organisations and individuals abroad on the ground that they threaten national security or unity rest on what international law calls the protective principle; Article 63 of China’s Law on Promoting Ethnic Unity and Progress is one example. Textbooks list two more: the victim’s nationality, and universal jurisdiction over crimes such as piracy and torture. Neither has much bearing on everyday decisions.

Extraterritoriality is neither rare nor inherently improper. Anti-corruption, antitrust, and sanctions regimes all reach abroad, and tax law can too: the United States taxes its citizens on their worldwide income wherever they live. What differs is how precisely the offence is defined. A clearly drawn extraterritorial law lets people determine in advance whether they are in breach; a vague one does not. That difference determines what the law is actually doing.

If such a law has never been enforced, why does it matter?

What such a law seeks is not a verdict but a change in behaviour, and for that it is enough that the law might be applied.

The mechanism is direct: a vague provision makes any given case impossible to assess in advance, and what cannot be assessed is rationally avoided. A researcher drops a topic, a publisher asks for one more legal opinion, a company adds a disclaimer, a traveller cancels a transit. Each decision is small on its own, and none is recorded as an event.

That is the deepest difference from ordinary law. Ordinary law produces its effects through enforcement, which can be counted. This kind of law produces them through expectation, and there is no denominator. Nobody ever learns how many articles went unwritten.

That places it in the same family as grey-zone operations: no single step amounts to an identifiable incident, and the accumulation is the objective. The only difference is the domain: here it is the law.

Who is actually exposed?

Exposure is set not by your views but by your travel, your nationality, and where your assets are. People often have this the wrong way round.

The highest risk usually attaches not to the most outspoken people but to the most mobile: researchers whose routes transit particular airports, people with family or property in the country, dual nationals, and employees of companies with a local entity. However severe its text, a law needs someone it can reach, and in practice that means a person, an asset, or a transaction entering the jurisdiction at some point.

Corporate exposure tends to sit where it is least expected: personal risk to local staff, director liability in a local subsidiary, licences requiring local approval, and customs or inspection that can simply be slowed. These overlap heavily with the levers of economic coercion, because none of them requires changing a rule, only the frequency and speed of enforcement.

The most vulnerable are usually those with no institution behind them: independent researchers, freelance writers, small publishers. Large organisations have counsel to assess the risk; individuals have only themselves, so the chilling effect shows up among them first.

What kind of protection actually works?

Useful protection shares one property: at the moment of decision, the person knows they are not carrying the risk alone. A statement cannot do that; an institutional arrangement can.

There are four in particular. The first converts individual exposure into institutional exposure: the institution puts its name on the work, carries the legal costs, and handles the response. An individual facing cross-border litigation backs down; an institution usually does not. The second is advance guidance on travel and transit routes, because most realised risk arises while people are on the move, and movement can be planned.

The third is blocking statutes: domestic rules that forbid firms to comply with particular foreign orders and make compliance itself a breach of domestic law. Their value lies less in frequent use than in giving a company something to point to: refusal stops being a choice and becomes an obligation.

The fourth, and the most easily overlooked, is recording cases and publishing them. Extraterritorial law runs on uncertainty, and every case that is precisely described and logged converts “possible” into “estimable”. A risk that can be estimated no longer deters in the same way.

What does this mean for readers and institutions in Taiwan?

Taiwan is a special case: several such laws and judicial documents write residents and institutions here directly into scope, so exposure follows from identity and itinerary rather than from political involvement. That makes “I stay out of politics, so I am fine” an unusually unreliable assumption here.

For institutions, three low-cost things come first: turn travel and transit guidance into written policy rather than word of mouth; confirm whether legal cost support extends to proceedings abroad; and create an internal channel for reporting, so that individuals are not left deciding for themselves whether something counts as serious.

For individuals, the practical point is not to leave the assessment until the week before departure. Itineraries, assets, and where relatives live can all be inventoried in advance, and the value of that inventory is that it turns a vague fear into a specific list. A specific list can be managed; a vague fear can only be obeyed.