Like, why does that matter? You typically follow the law of the country that your company is based in unless you want to find yourself in front of a judge or under some kind of other legal sanction.
Civil and criminal law was never designed in such a way to be implemented by a brain of the world..., ok I take that back, A 'brain of the world, if it knew where you were could possibly tell you that the information is restricted and give you a "I can't do that dave message" based on your location.
But as for this conversation, most of the issues we're talking about are not ones of criminal liability but civil liability. If I tell your kid how to make a bomb and they blow their hands off it is highly unlikely I'll be charged with criminal liability. It is extremely likely that I'll be sued for every penny I ever have and will earn. Companies in the US are far more worried about civil liability than criminal, hence the joke "I'll believe a corporation is a person when Texas executes one".
