Sadly, the only safe way for startups to ensure compliance will be to block IP blocks of any country they're not intentionally doing business in. You will start by intentionally doing business in your country of incorporation, contract out with a consultant to ensure that you are meeting your compliance requirements in your local jurisdiction, and only expand intentionally from there. Sure, users can use VPNs to bypass IP blocks, but at least then you have a defense that the user "traveled" to a jurisdiction where you do operate.
Or - you take a leaf from the pirate's book and throw caution to the wind. Which will be pretty much the only way to get the growth that investors expect, even as investors will refuse to invest without at least the appearance of legal certainty of the first option.
Or - you take a leaf from the pirate's book and throw caution to the wind. Which will be pretty much the only way to get the growth that investors expect, even as investors will refuse to invest without at least the appearance of legal certainty of the first option.