6.5 Many websites are based abroad. How can these laws be enforced?

The same way other internet laws are enforced: against the service, not the office address. Regulators can fine companies that serve their residents wherever the company sits, and where lawmakers have anticipated this challenge, escalate by requiring payment providers and advertisers to withdraw services, or ultimately having access blocked. In practice, most major regulated services are likely to comply rather than lose a market. Enforcement is also getting easier as jurisdictions converge: with the UK, the EU, Australia and a growing list of US states all requiring age assurance, compliance is becoming the global default, and there is already extensive cooperation between regulators.