The regulatory situation might get quite complicated I think, for example if you're in international waters, connected to the internet by a global ISP whose infrastructure is also outside of territorial limits then whose regulations do you have to comply with (besides your clients)? What's stopping the likes of Google poaching the concept of Radio Caroline, planting a datacentre somewhere in the North Sea and raising a two-fingered salute to any sort of data protection laws?