This gives you a good idea of how difficult it is to comply with regulations in the US. And, conversely, how (in)effective regulations which don't respect the underlying technological capabilities can be.

A few things to think about: -What if students try to access once from a blacklisted IP? Is their account now blacklisted? -Does Coursera need to comb its logs for past accesses from those countries? -What if a student mentioned their home country on the message board? -What if the person claims to be an American working in Sudan?