Another obstacle are the EU privacy laws. Don't get me wrong; I _like_ the fact the EU has privacy laws, and I personally wish the United States would do a little more in this area (always assuming, of course, that Congress didn't screw it up totally).
But when I ask our lawyer about it, he starts talking about Safe Harbor certification and all sorts of other fun stuff. For us, this isn't a problem—we're in an industry where certifications are generally useful—but for a consumer internet company, it's one more thing you need to figure out.