Jurisdiction, Sovereignty and Cross-Border Enforcement

Introduction

The internet has no single territorial boundary, yet almost every significant online activity is connected to one or more legal systems. A user may be located in one country, use a platform incorporated in a second, store data in a third, and cause harm to a victim in a fourth. A cyberattack may use infrastructure distributed across many jurisdictions, while evidence may be held by a service provider subject to another government’s laws. These characteristics make jurisdiction one of the central problems of cyber law.

Jurisdiction concerns the legal authority of a state, court, regulator, or law-enforcement agency to make decisions, regulate conduct, investigate wrongdoing, or enforce a judgment. Sovereignty concerns the authority of a state within its territory and its independence from other states. Cross-border enforcement concerns the practical and legal mechanisms through which a state seeks evidence, cooperation, prosecution, civil remedies, or execution of judgments beyond its borders.

Cyber law does not eliminate traditional jurisdictional principles. Instead, it applies them to conduct in which physical location, technological location, and legal responsibility may be separated. The central challenge is therefore not simply identifying where an event occurred, but determining which connections are legally sufficient, which law applies, which forum is appropriate, and how a decision can be made effective across borders.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain territorial, nationality-based, protective, effects-based, and universal jurisdiction.
2. Distinguish adjudicative, prescriptive, and enforcement jurisdiction.
3. Analyze the relationship between jurisdiction and state sovereignty.
4. Identify issues involving applicable law, forum selection, and conflicts of law.
5. Describe the principal mechanisms for cross-border investigation and international cooperation.
6. Assess practical, ethical, and legal difficulties in enforcing online rights and obligations.
7. Apply a structured framework to a cross-border cyber incident.

1. The Meaning and Dimensions of Jurisdiction

Jurisdiction is not a single legal power. It has at least three dimensions.

1.1 Prescriptive jurisdiction

Prescriptive jurisdiction is the authority to make rules governing conduct, persons, property, or events. For example, a state may enact a data-protection statute that applies to organizations established in that state and, in some circumstances, to organizations outside the state that offer services to its residents.

1.2 Adjudicative jurisdiction

Adjudicative jurisdiction is the authority of a court or tribunal to hear a dispute and issue a binding decision. It includes jurisdiction over the defendant, commonly called personal jurisdiction, and jurisdiction over the subject matter of the dispute.

A court may have subject-matter jurisdiction over a cybercrime or contract dispute but lack personal jurisdiction over a foreign defendant. Conversely, a defendant may be subject to a court’s authority even where the dispute raises complex questions about which country’s substantive law applies.

1.3 Enforcement jurisdiction

Enforcement jurisdiction is the authority to compel compliance with a judgment, order, warrant, or administrative decision. It is usually the most territorially restricted form of jurisdiction. A state generally cannot send police officers into another state to seize devices, search premises, arrest a person, or compel a foreign provider without a lawful basis and, normally, the consent or cooperation of the other state.

This distinction is essential. A court may lawfully decide a case involving a foreign defendant, but the judgment may be difficult to enforce if the defendant has no assets or presence in the forum state.

2. Jurisdictional Connecting Factors

States use connecting factors to justify the exercise of legal authority. The most important are the following.

2.1 Territorial jurisdiction

Territorial jurisdiction is based on conduct occurring within the state’s territory. In cyber cases, the relevant conduct may include:

• sending malicious code from a device located in the state;
• operating a server or data centre in the state;
• accessing a protected computer located in the state;
• suffering loss or injury in the state; or
• providing an online service through a substantial local presence.

Territoriality is often difficult because an online event may occur simultaneously in several places. A phishing message may be composed in State A, transmitted through infrastructure in States B and C, and used to obtain money from a victim in State D.

Territorial jurisdiction may be divided into subjective territoriality, based on conduct beginning within the state, and objective territoriality, based on conduct completed or producing effects within the state.

2.2 Nationality or active personality jurisdiction

Under the nationality principle, a state regulates the conduct of its nationals or, in some systems, its citizens and residents even when they act abroad. A country may prosecute its citizen for unauthorized access to a foreign computer system because the offender is its national.

This principle reduces the risk that nationals can avoid accountability simply by operating from abroad. It can, however, create overlapping claims where the place of conduct and the nationality of the offender point to different legal systems.

2.3 Passive personality jurisdiction

Passive personality jurisdiction is based on the nationality of the victim. A state may claim authority over conduct abroad because its national was harmed. This principle is particularly relevant to terrorism, serious violence, fraud, and certain cyber offences, but its acceptance and scope vary between legal systems.

2.4 Protective jurisdiction

Protective jurisdiction applies where conduct outside the state threatens fundamental governmental interests, such as national security, public infrastructure, currency systems, or classified information. Cyber espionage directed at a government network may therefore attract jurisdiction even if the attacker and technical infrastructure are located abroad.

2.5 Universal jurisdiction

Universal jurisdiction permits prosecution of certain exceptionally serious offences regardless of the ordinary territorial or nationality connection. Traditional examples include piracy, genocide, and certain crimes against humanity. It is not a general rule for all cyber offences. Ordinary hacking, online defamation, and commercial data breaches normally require a more specific connecting factor.

2.6 Effects-based jurisdiction

Effects-based jurisdiction focuses on substantial, foreseeable, and legally relevant effects within the state. It is common in competition law, securities regulation, consumer protection, privacy regulation, and certain civil claims.

An online business outside a country may be regulated because it deliberately targets that country’s consumers, monitors their behaviour, or processes their personal data in a way covered by local law. Mere accessibility of a website from a country is usually a weaker basis than purposeful targeting.

3. Sovereignty and the Limits of Extraterritoriality

State sovereignty means that a state has supreme authority within its territory and is generally independent in its external relations. In cyber law, sovereignty has two related implications.

First, a state may regulate activity sufficiently connected to its territory or interests. Second, one state must not normally exercise coercive governmental power inside another state without consent or an accepted rule of international law.

The distinction between regulation and enforcement is important. A country may enact a law with extraterritorial reach, such as a privacy or sanctions statute, but enforcing that law abroad may require cooperation from the foreign state. A regulator may issue a notice to a foreign company, yet collecting a fine or compelling disclosure may depend on the company’s local assets, local operations, or recognition of the order.

3.1 Cross-border access to data

Remote access creates difficult sovereignty questions. Suppose investigators in State A use lawful credentials to access a server in State B. Even if the investigators do not physically enter State B, the act may interfere with the authority of State B, especially if it involves searching private data, bypassing security, or altering information.

International instruments and national laws differ on when cross-border access is permissible. Some frameworks allow access to publicly available data or access with the consent of the person who has lawful authority over the data. Other forms of remote access may require mutual legal assistance or another agreed procedure.

3.2 Attribution and sovereignty

Attribution is the process of associating an online act with a person, organization, or state. Technical indicators such as IP addresses, domain registrations, malware characteristics, and payment records can be useful, but none automatically proves legal responsibility. Devices may be compromised, identities may be falsified, and infrastructure may be leased through intermediaries.

Attribution should therefore be treated as a combination of technical, documentary, behavioural, and legal evidence. A state should avoid treating technical suspicion as conclusive proof, particularly where criminal prosecution, diplomatic action, or military response is contemplated.

4. Applicable Law and Conflicts of Law

Jurisdiction and applicable law are separate questions. A court may have authority to hear a dispute but apply the law of another country.

4.1 Choice-of-law analysis

Courts use different approaches to determine applicable law. Common approaches include:

• the law expressly chosen by the parties;
• the law of the place where the contract was made or performed;
• the law of the place of injury;
• the law with the closest or most substantial relationship to the dispute; and
• mandatory rules of public policy that apply regardless of contractual choice.

A contractual choice-of-law clause is important but not unlimited. Courts may refuse to apply it where it violates mandatory consumer, employment, privacy, insolvency, or public-interest rules.

4.2 Contractual forum-selection clauses

A forum-selection clause identifies the court or arbitration seat chosen by the parties. An exclusive clause seeks to require disputes to be brought in one forum, while a non-exclusive clause permits proceedings in that forum without necessarily excluding others.

Courts commonly consider whether the clause is valid, whether the dispute falls within its scope, whether the selected forum is reasonably connected to the parties, and whether enforcement would be unjust or contrary to mandatory law. Consumer and employment contracts receive special scrutiny because bargaining power may be unequal.

4.3 Mandatory local law

Online contracts cannot always avoid local legislation. Data-protection, consumer-protection, intellectual-property, cybersecurity, taxation, and criminal laws may apply because they protect public interests. A company may select the law of its incorporation for contract interpretation, yet still be required to comply with the data-protection law of a country whose residents it targets.

4.4 Forum non conveniens and parallel proceedings

A court may decline to hear a case when another forum is clearly more appropriate. Relevant factors may include the location of witnesses and evidence, the governing law, the cost of proceedings, the ability to obtain a fair trial, and the risk of fragmented litigation.

Parallel proceedings occur when courts in multiple countries hear related disputes. They can produce inconsistent judgments, duplicative costs, and strategic forum shopping. Courts may respond through stays, anti-suit injunctions where legally available, coordination, or recognition of the first properly seized court.

5. Civil, Criminal and Regulatory Jurisdiction Compared

The same event may generate all four forms of proceedings. A ransomware attack may lead to criminal investigation, regulatory action for inadequate security, civil claims by customers, and arbitration under a technology contract.

6. Cross-Border Investigation and Evidence

Digital evidence is volatile, replicable, and often controlled by private intermediaries. Relevant evidence may include subscriber information, login records, transaction data, cloud content, malware samples, device images, emails, and security logs.

6.1 Preservation and disclosure

Investigators should distinguish preservation from production. A preservation request asks a provider to retain existing data so that it is not deleted. A disclosure request seeks the release of that data under legal authority. Preservation does not itself authorize access to content.

Providers may be subject to different rules depending on the type of data, the location of the provider, the location of the data, and the nationality or residence of the account holder. Data-protection law may also restrict unnecessary or excessive disclosure.

6.2 Mutual legal assistance

Mutual legal assistance is a formal state-to-state process through which one country requests investigative assistance from another. A request may seek service of documents, witness interviews, search and seizure, production of records, or transfer of a person for testimony.

A typical request should identify the legal basis, facts, offences under investigation, requested measures, relevance of the evidence, confidentiality requirements, and any urgency. The requested state applies its own procedural safeguards and may refuse assistance where requirements are not met.

6.3 Treaties and international frameworks

Cybercrime cooperation may be supported by bilateral treaties, regional instruments, multilateral conventions, domestic legislation, and police cooperation channels. The Convention on Cybercrime of the Council of Europe, commonly called the Budapest Convention, is an important example of an international framework addressing cybercrime offences, procedural powers, and cooperation. Its operation remains subject to the domestic law and commitments of participating states.

Other instruments may address electronic evidence, extradition, privacy, trade, mutual recognition, or organized crime. Students must verify the current status of a treaty, reservations, implementing legislation, and the specific law of the jurisdictions concerned. No international instrument should be assumed to operate identically in every country.

6.4 Direct cooperation with service providers

Some systems permit investigators to obtain certain records directly from service providers, especially where the provider is subject to the requesting state’s jurisdiction or voluntarily responds to a lawful request. Direct cooperation can be faster than formal assistance, but it must not bypass applicable legal safeguards. Providers should verify authority, scope, authenticity, and data-protection obligations.

6.5 Chain of custody and admissibility

Cross-border evidence must be collected, transferred, stored, and presented in a way that permits a court to assess authenticity and integrity. Investigators should document who collected the evidence, when and how it was acquired, the tools used, transfers between custodians, storage conditions, and any transformation or analysis.

A technically accurate record may still be excluded if it was obtained unlawfully or in breach of constitutional, privacy, or procedural protections. Cyber investigations therefore require both technical competence and legal discipline.

7. Extradition, Arrest and Enforcement of Judgments

7.1 Extradition

Extradition is the formal surrender of a person by one state to another for prosecution or punishment. Common conditions include dual criminality, sufficient evidence or a valid warrant, speciality, proportionality, and protection against torture or unfair trial. Some states refuse to extradite their nationals or require domestic prosecution instead.

Cybercrime presents special difficulties because the alleged conduct may be criminal in one country but not another, or because different countries classify the same conduct differently.

7.2 Recognition and enforcement of civil judgments

A judgment issued in one country does not automatically have effect everywhere. The enforcing court may examine jurisdiction, notice, procedural fairness, public policy, fraud, and finality. International conventions and regional regimes may simplify recognition, but coverage varies.

A claimant should assess enforcement prospects before commencing litigation. A favourable judgment against a defendant with no reachable assets may have limited practical value.

7.3 Freezing and recovery of digital assets

Cybercrime proceeds may be transferred rapidly through bank accounts, payment processors, virtual-asset services, or layered transactions. Asset freezing generally requires lawful orders and cooperation from institutions in the relevant jurisdictions. Speed is important, but urgency does not remove the need for reliable evidence and judicial oversight.

8. A Practical Framework for Jurisdictional Analysis

A structured analysis can reduce confusion. The following sequence is useful:

1. Map the facts. Identify the people, organizations, devices, servers, data, payments, injuries, and relevant dates.
2. Separate the proceedings. Ask whether the matter is civil, criminal, regulatory, arbitral, or several at once.
3. Identify connecting factors. Consider territory, nationality, residence, effects, establishment, targeting, and protected interests.
4. Determine the forum. Examine personal jurisdiction, subject-matter jurisdiction, forum clauses, and procedural suitability.
5. Determine applicable law. Analyze choice-of-law rules, contractual clauses, mandatory legislation, and public policy.
6. Plan evidence acquisition. Identify custodians, preservation needs, legal authority, privacy constraints, and international cooperation routes.
7. Assess enforcement. Locate assets, personnel, providers, and institutions capable of implementing the outcome.
8. Check proportionality and rights. Consider privacy, due process, freedom of expression, equality, and necessity.
9. Obtain local advice. Cyber cases often require counsel or authorities familiar with each relevant legal system.

9. Illustrative Case: The Northstar Ransomware Incident

This is a fictional educational scenario.

Background

Northstar Health Services is incorporated in Country A and operates hospitals in Country A and Country B. Its cloud provider is incorporated in Country C, while backup servers are located in Countries C and D. An attacker using compromised devices in Country E encrypts hospital systems and demands payment in a virtual asset. Patients in Countries A and B experience cancelled procedures. Northstar’s incident-response team identifies a command server in Country F and a payment-exchange account in Country G.

Problem

Northstar must decide where to report the incident, which state may prosecute, how to preserve evidence, whether it must notify regulators, and how to recover funds. It also faces civil claims alleging inadequate cybersecurity.

Analysis

Country A has territorial and regulatory jurisdiction because Northstar is incorporated there and operates affected hospitals. Country B has territorial and effects-based interests because patients and hospital operations there were directly affected. Country E may claim jurisdiction based on the location of compromised devices or the nationality of the attacker if identified. Countries C and D control relevant infrastructure and may hold evidence. Country G may be able to freeze the payment account. Country F has an interest in the command server.

No single IP address resolves the jurisdictional problem. Investigators should distinguish the attacker’s location from the location of compromised infrastructure. They should preserve logs at Northstar and the cloud provider, notify relevant authorities, and use appropriate legal channels for records in Countries C through G.

Approach and solution

Northstar should establish an incident-command structure, preserve evidence before system restoration, record decisions, and coordinate with law enforcement and regulators. It should assess contractual duties to patients, insurers, cloud providers, and public authorities. Requests for foreign assistance should specify the evidence sought and explain urgency. If funds are transferred, Northstar should immediately provide transaction identifiers to appropriate authorities and exchanges.

Civil litigation should be assessed in light of contracts, forum clauses, mandatory healthcare and privacy rules, and the location of losses. A judgment in Country A may require recognition or enforcement in Country B or wherever the defendant’s assets are located.

Outcome

Assume that Country G freezes part of the payment, Country C supplies subscriber and server records under a cooperation mechanism, and Country E arrests a suspect. The prosecution still must prove attribution, intent, unauthorized access, causation, and the integrity of digital evidence. Northstar may face regulatory scrutiny even if it was a victim, particularly if it failed to implement legally required safeguards.

Learning points

The case illustrates that jurisdiction is distributed across facts, not concentrated in a single technical location. Cooperation must begin quickly, but speed must be combined with lawful authority, accurate attribution, evidence preservation, and respect for privacy and due process.

10. Ethical, Governance and Professional Issues

Cross-border cyber enforcement involves serious ethical choices. Investigators may be tempted to access foreign systems directly, deploy countermeasures, or disclose personal information broadly. Such actions can damage innocent parties, violate sovereignty, or escalate conflict.

Organizations should apply necessity, proportionality, purpose limitation, data minimization, and accountability. They should not collect every available data point merely because technology permits it. International requests should be specific and should protect confidential, privileged, or sensitive information.

Private companies also exercise considerable power. Cloud platforms, registrars, payment processors, and social-media services may receive requests from multiple governments. They should maintain clear legal-request procedures, resist invalid or overbroad demands, preserve evidence appropriately, and provide transparency consistent with law and safety.

Artificial intelligence can assist with log analysis, translation, prioritization, and pattern detection in cross-border investigations. It should not be treated as conclusive proof of attribution or intent. Automated systems may reproduce bias, misclassify activity, or obscure the basis for a decision. Human review, auditability, and disclosure of significant limitations remain necessary.

11. Contemporary Developments and Continuing Challenges

Several developments are reshaping jurisdictional practice:

• cloud computing separates data from the customer’s physical location;
• encryption may prevent providers from producing content even when legally compelled;
• data-localization rules can conflict with efficient investigation;
• privacy legislation increasingly regulates international transfers;
• digital platforms face overlapping consumer, competition, content, and cybersecurity obligations;
• virtual assets complicate tracing, freezing, and recovery;
• remote work expands the number of jurisdictions implicated by one organization; and
• states continue to negotiate rules for electronic evidence and responsible state behaviour in cyberspace.

The major challenge is balancing effective enforcement with sovereignty, privacy, human rights, and legal certainty. Overly narrow jurisdiction may create safe havens for offenders. Overly broad jurisdiction may produce conflict, duplicative regulation, and unpredictable liability.

Best-Practice Checklist

For organizations:

• maintain an accurate map of systems, providers, data locations, and contractual obligations;
• include carefully drafted governing-law, forum, cooperation, audit, and incident-notification clauses;
• maintain an evidence-preservation and legal-hold procedure;
• identify regulators and law-enforcement contacts before an incident occurs;
• document decisions, authorizations, and transfers of evidence;
• assess cross-border privacy and employment restrictions before sharing data; and
• test whether judgments, injunctions, or payment freezes could actually be enforced.

For investigators and legal professionals:

• separate technical indicators from legally sufficient proof;
• use the least intrusive lawful investigative measure;
• distinguish preservation, disclosure, search, seizure, and interception;
• confirm treaty status and implementing legislation;
• protect chain of custody and authenticity; and
• consider the rights of suspects, victims, employees, and uninvolved third parties.

Chapter Summary

Jurisdiction determines which state or institution may regulate conduct, decide a dispute, investigate wrongdoing, or enforce an outcome. Territoriality remains the primary principle, but nationality, victim status, protective interests, and substantial effects may also establish jurisdiction. Prescriptive, adjudicative, and enforcement jurisdiction are distinct, and the existence of one does not automatically establish the others.

Cyber incidents commonly involve multiple states because users, victims, infrastructure, data, providers, and assets may be distributed internationally. Courts must distinguish jurisdiction from applicable law and must address forum selection, conflicts of law, parallel proceedings, and mandatory local rules. Cross-border investigations depend on preservation, lawful disclosure, mutual legal assistance, treaties, provider cooperation, extradition, and recognition of judgments.

Effective enforcement requires technical evidence, accurate attribution, procedural legality, international cooperation, and realistic attention to where assets and decision-makers are located. Sovereignty, privacy, due process, proportionality, and human rights limit the use of extraterritorial powers. A careful jurisdictional analysis therefore maps the facts, identifies connecting factors, selects the appropriate forum, determines governing law, plans evidence collection, and tests the practical enforceability of the proposed remedy.

Key Terms

Jurisdiction: Legal authority to regulate, adjudicate, investigate, or enforce.

Prescriptive jurisdiction: Authority to create rules governing conduct or persons.

Adjudicative jurisdiction: Authority of a court or tribunal to hear and decide a matter.

Enforcement jurisdiction: Authority to compel compliance with a legal decision or investigative measure.

Territoriality: Jurisdiction based on conduct, persons, property, or effects within a state’s territory.

Nationality principle: Jurisdiction based on the nationality of the alleged offender.

Passive personality: Jurisdiction based on the nationality of the victim.

Protective principle: Jurisdiction based on threats to fundamental state interests.

Universal jurisdiction: Jurisdiction over exceptionally serious offences regardless of ordinary territorial connections.

Effects doctrine: Jurisdiction based on substantial and foreseeable effects within a state.

Sovereignty: A state’s supreme authority within its territory and independence in external affairs.

Extraterritoriality: Application of a state’s law or authority beyond its territory.

Choice of law: The process of determining which jurisdiction’s substantive law applies.

Forum-selection clause: A contractual provision identifying the court or arbitration forum for disputes.

Forum non conveniens: A doctrine allowing a court to decline a case when another forum is substantially more appropriate.

Mutual legal assistance: Formal cooperation by one state in obtaining evidence or performing legal measures for another.

Extradition: Formal surrender of a person by one state to another for prosecution or punishment.

Chain of custody: Documented control and handling of evidence from collection to presentation.

Recognition and enforcement: Acceptance and implementation of a foreign judgment or award.

Attribution: Association of a cyber activity with a person, organization, or state.

Review Questions

Short Answer Questions

1. What is the difference between prescriptive, adjudicative, and enforcement jurisdiction?
2. Explain territorial jurisdiction in the context of a distributed cyberattack.
3. What is the purpose of a forum-selection clause?
4. Why is preservation of digital evidence different from disclosure of digital evidence?
5. Define mutual legal assistance.

Long Answer Questions

1. Compare territorial, nationality-based, protective, passive personality, and effects-based jurisdiction.
2. Explain how state sovereignty limits direct cross-border cyber investigations.
3. Discuss the relationship between jurisdiction and applicable law in an international online contract dispute.
4. Describe the principal legal and practical challenges in obtaining electronic evidence from a foreign service provider.
5. Explain the factors a court may consider when recognizing and enforcing a foreign judgment.

Analytical / Application Questions

1. A social-media company incorporated in Country A targets advertising at users in Country B, stores data in Country C, and is sued by a user in Country D. Identify the possible jurisdictional claims and the issues that would determine the appropriate forum.
2. Investigators in Country X discover that a ransomware command server is located in Country Y. Analyze the lawful options for obtaining server records and explain the sovereignty concerns raised by direct remote access.
3. Apply the jurisdictional analysis framework to the Northstar ransomware scenario. Which jurisdictions should cooperate, what evidence should be preserved first, and what factors would affect the enforceability of any judgment?

Multiple Choice Questions with Answers

Question 1

Which type of jurisdiction concerns a state’s authority to create rules governing conduct?

A. Prescriptive jurisdiction

B. Adjudicative jurisdiction

C. Enforcement jurisdiction

D. Arbitral jurisdiction

Correct Answer: A. Prescriptive jurisdiction

Question 2

A court’s authority to hear a dispute but not necessarily to enforce its judgment abroad illustrates the distinction between adjudicative and which type of jurisdiction?

A. Nationality jurisdiction

B. Enforcement jurisdiction

C. Passive personality jurisdiction

D. Universal jurisdiction

Correct Answer: B. Enforcement jurisdiction

Question 3

Which connecting factor is based primarily on the nationality of the alleged offender?

A. Passive personality

B. Protective principle

C. Nationality principle

D. Effects doctrine

Correct Answer: C. Nationality principle

Question 4

Why is mere accessibility of a website usually a weaker basis for effects-based jurisdiction than purposeful targeting?

A. Accessibility never creates any legal connection

B. Purposeful targeting demonstrates a more substantial and foreseeable connection

C. Websites cannot be regulated across borders

D. Only the server’s location is legally relevant

Correct Answer: B. Purposeful targeting demonstrates a more substantial and foreseeable connection

Question 5

What is the principal function of a preservation request to a service provider?

A. To authorize immediate public disclosure of all content

B. To require a criminal conviction

C. To retain existing data so it is not deleted

D. To transfer jurisdiction to the provider’s country

Correct Answer: C. To retain existing data so it is not deleted

Question 6

Which mechanism is generally a formal state-to-state process for obtaining evidence abroad?

A. Mutual legal assistance

B. Forum shopping

C. Domain-name registration

D. Private arbitration only

Correct Answer: A. Mutual legal assistance

Question 7

What does dual criminality in extradition generally require?

A. The offence must be punishable only in the requesting state

B. The conduct must generally constitute an offence in both states

C. The suspect must hold dual nationality

D. Two courts must issue identical judgments

Correct Answer: B. The conduct must generally constitute an offence in both states

Question 8

Which issue is most directly concerned with proving that digital evidence was properly handled from collection to trial?

A. Choice of law

B. Chain of custody

C. Passive personality

D. Forum non conveniens

Correct Answer: B. Chain of custody

Question 9

What is a major sovereignty concern when investigators directly access a server located in another country?

A. The server cannot contain electronic evidence

B. The access may constitute governmental action within another state without consent

C. The investigation automatically becomes civil rather than criminal

D. The foreign state loses all jurisdiction over the server

Correct Answer: B. The access may constitute governmental action within another state without consent

Question 10

Which statement best describes the relationship between jurisdiction and applicable law?

A. They are always identical questions

B. A court with jurisdiction must always apply its own law

C. A court may have jurisdiction while applying another jurisdiction’s law

D. Applicable law determines whether a court physically exists

Correct Answer: C. A court may have jurisdiction while applying another jurisdiction’s law