No:
> The new Belgian whistleblower law only applies in Belgium. If a cybersecurity vulnerability concerns an IT system outside of Belgium, hacking might be covered by the rules of the country where the system is located.
> The new Belgian whistleblower law only applies in Belgium. If a cybersecurity vulnerability concerns an IT system outside of Belgium, hacking might be covered by the rules of the country where the system is located.
i.e. you can’t be extradited for something that is a crime in a foreign country but isn’t in yours.
Belgium can’t give you a license to commit a crime in another country.
(and whether secret services are "allowed" to do so, is a seperate question)
Something like this happened on the cloud when they were running low on IPv4 addresses.
There's nothing at all preventing me from geolocating my /32 of v6 to anywhere at all I want.
Or chopping it into smaller subnets and then allocating those wherever.
If a Belgian citizen in Belgium hacks my US server they are not protected by this Belgian law.
Yet if a Belgian citizen in Belgium visits my US server they are protected by GDPR?
How does that work then?
Same reason that if a country Y has a law against selling thing X, but no law against buying thing X, then you, outside of country Y, are still not allowed to sell+ship X to people in country Y. For purposes of commercial interactions with people in country Y, you're acting as a local subsidiary subject to those laws. (In fact, for tax reasons, you may not even be able to sell into many countries without having a real established domestic incorporated business in those countries.)
Note that this doesn't apply if there's a (multinational) import/export business involved — in which case, you have no obligation to avoid selling X into the country, because you're selling X to your own domestic country-Z arm of the importer/exporter. It's then the import/export business's duty to comply with laws about what can be sold in country Y (and to pay any import tariffs, etc.)
No, not if you and your server have no EU presence. There might be other reasons to comply, though.
If an EU company provides a service to a US citizen they must comply with US regulations (eg Sales Tax, etc)
An example: I don't have any legal obligation to the GDPR for my (hypothetical) US based blog as a US citizen, regardless of who visits it. But if I want to sell a t-shirt from the site, potentially to people in EU, failure to comply may result in the EU taking action to prevent me from doing business in the EU.
Source: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-re...