Thanks for those resources, I am aware of the DLA Piper resource already but good to know it is recommended by others as well.

My main concern is that how can an organisation that does not have a legal department or funds to engage one properly answer questions such as what laws are in other countries and how they are enacted and also enforced? It seems a very high bar that could take a significantly long time to just google and then rely on the various public information being right.

It seems like this is a no-win situation for smaller organisations as we have to go through it but the chances of getting it right are so low that you are penalised in spending significant resource to do it and it offers little protection as if ever challenged it will likely be picked apart quite easily.