Extraterritorial reach

A regulatory feature where a jurisdiction's requirements apply to conduct or content originating outside that jurisdiction's borders, based on the requirement's effect inside the jurisdiction; China's labeling and certain algorithm filing requirements, and the EU AI Act's general-purpose-AI-model scope provisions, both carry meaningful extraterritorial reach relevant to a foreign provider serving that market from abroad.

A law's application to organizations located outside the jurisdiction based on where the affected people, their data, or the system's output are. The ANPD's action against a United States company for processing Brazilians' data is a worked example.

the property of a legal instrument, such as the EU AI Act, that extends its obligations to organizations outside the issuing jurisdiction whenever their AI system's output is used by, or affects, people inside that jurisdiction.

The feature of laws like GDPR and the EU AI Act by which they apply based on where affected people or system outputs are, not where the company sits. It is why "we are domestic-only" is rarely a defense.

A regime's ability to apply beyond its borders. The EU AI Act can apply to a provider or deployer outside the EU when the AI system's output is used within the EU, regardless of company size.