> It's obvious US laws would apply if you're serving US customers
So any customer from Libya makes it customary for my female co-workers to wear hijab at the workplace, right? Same logic.
No.
A customer who voluntarily purchases services from a company in a different jurisdiction does NOT automatically makes this company subject to his specific jurisdiction.
She does if you want to keep doing business there. That's the stick that's available. Either you follow their laws despite not being in their jurisdiction or you can't sell to customers in Libya.
I don't like it same as you because it makes doing business on the internet complicated but it's how it works in practice.
Why though? Libya has no jurisdiction over my business in the EU. I place no restrictions on who can purchase a subscription on my SaaS. I certainly can sell to customers in Libya.
All Libya can do is ban my business, but they can only implement that ban within their own sovereign borders.
I suppose inability for you to sell and inability for customers to buy are technically different but the end result ends up being the same. If you need to access that market then they have leverage over you to force compliance with their laws.
I'm not sure Libya has any solution to prevent their citizens from purchasing my services. Blocking access to my site, sure. But preventing citizens from using my service is going to be much, much harder.
So any customer from Libya makes it customary for my female co-workers to wear hijab at the workplace, right? Same logic.
No.
A customer who voluntarily purchases services from a company in a different jurisdiction does NOT automatically makes this company subject to his specific jurisdiction.