Jurisdiction Without Locus

Modern legal systems rest on a centuries-old structural assumption: human activity occurs somewhere in particular. Since the 1648 Peace of Westphalia, public international law, personal jurisdiction, statutory venue, tax compliance, and sovereign police power have all presupposed a stable, predictable relationship between human action and physical geography. Courts ask where a contract was formed, where a tortious harm materialized, or where an asset resides. Legislators draw geographic borders, and executive authorities enforce laws exclusively within those physical boundaries. Physical territory is the physical substrate upon which the modern constitutional and regulatory order is constructed. The digital transformation of global commerce and computation has, however, dissolved that substrate. Economic transactions, governance decisions, and operational interactions now occur inside distributed network environments where physical location is ambiguous, dynamically shifting, or structurally irrelevant. While reality has become non-spatial, statutory and regulatory frameworks remain place-bound.

Technical Architecture as Jurisdictional Dissolution

Traditional conflict-of-laws doctrines depend on identifying a discrete physical locus. Private international law relies on choice-of-law principles such as lex loci delicti (the law of the place where the wrong occurred) or lex loci contractus (the law of the place where the contract was executed), codified in frameworks like the Restatement (Second) of Conflict of Laws § 145 [Author’s Note: We see how these legacy frameworks fare in recent cases such as Hencely, where a former Army specialist sued a military contractor after suffering severe injuries from a suicide-bomb attack in Afghanistan. Hencely alleged negligent supervision and brought his state-law tort claims in a South Carolina federal court. The Supreme Court majority allowed the suit to proceed, holding that federal law does not preempt state-law tort claims when a military contractor acts outside the authority granted by the military. But it is Justice Alito’s dissent that exposes the profound structural absurdity of the modern legal system's reliance on territorial anchors in the context of modern interactions. Because the lawsuit was filed in a South Carolina federal court, the court is bound to apply South Carolina's choice-of-law rules. South Carolina utilizes the traditional lex loci delicti doctrine. Consequently, a U.S. federal court adjudicating a dispute between an American soldier and an American defense contractor must apply the laws of Afghanistan as they existed in 2016.]

In the United States, the personal jurisdiction doctrine established in International Shoe Co. v. Washington, 326 U.S. 310 (1945), requires "minimum contacts" with a specific forum state such that exercising authority does not offend "traditional notions of fair play and substantial justice". Early attempts to adapt these spatial principles to networked computing produced intermediate doctrines, such as the "sliding scale" test in Zippo Manufacturing Co. v. Zippo Dot Com, Inc., 952 F. Supp. 1119 (W.D. Pa. 1997), which evaluated personal jurisdiction based on the degree of interactivity of a website hosted on a server in a known physical location.

Modern distributed architecture invalidates these spatial frameworks entirely:

• Fragmented Cloud Storage: Enterprise data is rarely stored as unified files on single servers. Modern cloud infrastructure (e.g., multi-tenant object storage) automatically shards, encrypts, and distributes data blocks across geo-redundant server clusters spanning multiple sovereign nations to optimize latency, redundancy, and load balancing.

• Dynamic Network Routing: Data packets traverse borderless global fiber networks in milliseconds, dynamically routed through intermediary nodes selected programmatically based on network congestion rather than legal jurisdiction.

• Deterministic Peer-to-Peer Protocols: Public blockchain networks and peer-to-peer storage systems (such as IPFS) exist as decentralized state machines maintained by thousands of independent validator nodes simultaneously across hundreds of legal jurisdictions.

When a single execution state transition involves a client in Singapore, a validator node in Germany, a smart contract hosted across a global peer-to-peer network, and cloud storage fragmented across three continents, traditional legal questions lose determinate answers. No single nation-state can claim exclusive or coherent territorial jurisdiction over the act. Distributed protocols are explicitly engineered to eliminate single physical points of control, rendering them jurisdictionally evasive by architectural construction.

Case Study: US v. Microsoft and the CLOUD Act

The collapse of territorial jurisdiction reached a breaking point in the landmark litigation United States v. Microsoft Corp., 584 U.S. ___ (2018). In 2013, federal law enforcement officers in the United States served a search warrant, directing Microsoft to disclose the contents of an email account associated with a webmail customer. Microsoft produced non-content data stored on U.S. servers but refused to disclose the email content, which was physically stored on a server in Dublin, Ireland. Microsoft argued that U.S. statutory search warrants have no extraterritorial reach and that executing a warrant on foreign soil violated Irish and European national sovereignty. The U.S. Court of Appeals for the Second Circuit ruled in favor of Microsoft (Microsoft Corp. v. United States, 829 F.3d 197 (2d Cir. 2016)), holding that the SCA did not authorize courts to issue warrants for data stored abroad. While the case was pending review before the U.S. Supreme Court, Congress intervened by passing the Clarifying Lawful Overseas Use of Data (CLOUD) Act of 2018 which abandoned territorial situs as the defining criterion for legal compliance and redefined jurisdiction around administrative control. The CLOUD Act was therefore a statutory admission that physical location had failed as an organizing legal principle.

Law stopped asking "Where is the server?" and began asking "Who holds the administrative root key?"

However, substituting corporate control for physical locus created immediate cross-border legal conflicts. Complying with a U.S. CLOUD Act warrant forced a cloud provider to directly violate Article 48 of the European Union’s General Data Protection Regulation (GDPR), which prohibits the transfer of personal data to third-country authorities unless based on an international agreement such as a Mutual Legal Assistance Treaty (MLAT). As a result, the EU had to issue specific Guidelines on this.

Vignette:

Contract Formation at a Distance

The breakdown of physical locus is nowhere more visible than in the mechanics of contract formation across non-spatial channels. As economic activity migrated to electronic media, courts and legislatures across the United Kingdom, United States, and European Union were forced to re-engineer core contract doctrines to accommodate instantaneous, cross-border execution.

1. The Death of the Postal Rule in Electronic Communications. Under traditional English common law, the Postal Rule (Adams v. Lindsell [1818] 1 B & Ald 681) stipulated that acceptance of an offer took effect the moment a letter was posted into the physical custody of the postal service, establishing contract formation at the physical location of dispatch. When applied to modern electronic communications, however, courts rejected the postal rule in favor of the Receipt Rule. Beginning with Entores Ltd v. Miles Far East Corp [1955] 2 QB 327, and reaffirmed by the House of Lords in Brinkibon Ltd v. Stahag Stahl [1983] 2 AC 34, instantaneous or near-instantaneous communications such as telex require acceptance to be actually received by the offeror to be effective. English courts treat email as instantaneous communication. Acceptance occurs when the electronic message arrives at the offeror’s email server inbox during ordinary business hours (Bernuth Lines Ltd v. High Seas Shipping Ltd [2005] 1 Lloyd's Rep 513), irrespective of when the recipient physically opens or reads the message. Informal email correspondence routinely creates binding obligations without formal signatures. In Golden Ocean Group Ltd v. Salgaocar Mining Industries PVT Ltd [2012] EWCA Civ 265, the Court of Appeal of England and Wales held that a sequence of informal emails constituted an enforceable agreement. In Athena Brands Ltd v. Superdrug Stores Plc [2019] EWHC 3503 (Comm), the High Court granted summary judgment against a major retailer after an employee confirmed a minimum purchase commitment of £1.3 million via a simple email stating "Please go ahead." The court ruled that the employee had ostensible authority and that informal email exchanges formed a legally binding contract.

Key Principle: In the digital economy, contractual commitment is generated continuously through informal electronic exchanges. The absence of a formal paper document or physical wet-ink signature provides no defense against enforcement.

2. Legal Frameworks for Electronic Signatures: US, EU, and UK. Major legal jurisdictions now have specialized electronic signature frameworks:

United States (E-SIGN Act & UETA): The Electronic Signatures in Global and National Commerce Act (E-SIGN, 15 U.S.C. §§ 7001 et seq.) and the state-level Uniform Electronic Transactions Act (UETA), which DocuSign actually relies on, establish the baseline rule that a signature, contract, or record may not be denied legal effect solely because it is in electronic form. Crucially, § 14 of UETA explicitly recognizes the validity of automated contracts executed by electronic agents operating without human intervention, which means that “acceptance by agent” is valid for contract formation.

European Union (eIDAS & eIDAS 2.0): Regulation (EU) No 910/2014 (eIDAS) created a tiered standard for electronic signatures. eIDAS 2.0 (Regulation (EU) 2024/1183) expanded this architecture by establishing the European Digital Identity (EUDI) Wallet, mandating cross-border acceptance of verifiable digital credentials and qualified signatures for identity verification and automated remote contracting across regulated private and public sectors.

United Kingdom Framework: In 2019, the Law Commission of England and Wales affirmed that electronic signatures fulfill statutory requirements for execution. In its landmark 2021 Advice on Smart Legal Contracts, the Law Commission also confirmed that the common law of England and Wales flexibly accommodates automated smart contracts (including pure code execution) without statutory reform.

The Oscillation: Overreach vs. Paralysis

Deprived of territorial boundaries, nation-states oscillate between two systemic failures:

1. Extraterritorial Overreach

Governments attempt to project domestic statutory authority across the entire global internet. The EU’s GDPR exemplifies this approach under Article 3(2), which applies extra-territorially to any entity outside the EU that processes personal data of data subjects located within the Union where processing activities relate to offering goods or services or monitoring behavior. This dynamic, termed the "Brussels Effect", uses market size to force global compliance, effectively re-territorializing digital space by imposing a single jurisdiction’s standards on the entire global network. Similar extraterritorial assertions appear in U.S. financial enforcement through the Office of Foreign Assets Control (OFAC), which uses foreign correspondent banking connections to enforce global compliance with U.S. sanction lists.

2. Regulatory Paralysis

When states encounter fully decentralized protocols, traditional enforcement frameworks fail. When an autonomous protocol operates across a peer-to-peer network without centralized corporate management, board directors, or a legal entity, there is no corporate entity to subpoena under a CLOUD Act model. Recent enforcement actions illustrate this paralysis. In CFTC v. Ooki DAO, the U.S. Commodity Futures Trading Commission sought to impose general partnership liability on individual governance token holders of an unincorporated autonomous organization. Similarly, OFAC’s 2022 designation of immutable smart contract addresses associated with Tornado Cash represented an attempt to apply sanctions to open-source, autonomous software code itself. These actions highlight the limits of legacy frameworks: states must stretch foundational legal definitions to exert control over systems that lack a central administrative interface.

Westphalian Regression: Spatial Bans

When extraterritorial regulation fails and procedural enforcement stalls, states resort to spatial enclosures: the national access ban. Legislative attempts to ban global software applications or restrict decentralized finance protocols represent attempts to force the internet back into Westphalian territorial boundaries. Banning platforms at the domestic ISP or app store layer treats digital protocols like foreign cargo vessels being denied entry to a physical port. These spatial measures fail to control the underlying technology. Users bypass geographic access restrictions using Virtual Private Networks (VPNs), alternative RPC endpoints, decentralized DNS services, and encrypted peer-to-peer tunnels. Spatial bans do not shut down non-spatial protocols, they merely partition domestic citizens from the global digital economy.

In attempting to restrict access to borderless networks, states treat their citizens as enclosed subjects (formerly known in history as serfs) rather than sovereign individuals.

Beyond Locus: Architecting Law as Infrastructure

Physical geography remains essential for human activity, land assets, and concrete infrastructure. However, physical territory can no longer serve as the sole organizing substrate for governance, regulatory authority, and economic architecture. Jurisdiction is now permanently fragmented, overlapping, and contested. When legal frameworks lose their temporal speed and their physical anchor, sovereign enforcement power drifts toward unpredictability and overreach. To build durable ventures, capital vehicles, and institutions in this environment, founders cannot rely on single-jurisdiction structures. Instead, emerging organizations now require multi-entity topographies previously reserved to big corporations only, designing governance and operational architectures that align with the technical reality of borderless networks. When law loses both its temporal speed and its geographic place, authority undergoes a fundamental shift. If governance no longer acts in time and no longer operates in a fixed physical space, a deeper structural question emerges:

Who actually governs in practice?