I’m working on a paper, and I am attempting to determine whether companies based in countries other than the U.S. are not subject to U.S. regulations (whether privacy specific or not, although the paper’s topic is privacy regulations), so that if a web site is based in…Germany, for example, they have to comply with German laws, but not necessarily with U.S. laws concerning consumer information.
First, am I accurate in thinking that the law pertains to the country in which the organization is based? Second, can anyone help me find a cite that proves or disproves this?
Just for the record, this paper is an analysis of U.S. privacy policies. I am just looking for this information in an attempt to prove one of a number of points in the paper.
Many thanks