Jurisdiction
From ConRunner
Its obvious for a physical convention what jurisdiction an event comes under, what privacy, copyright, freedom of speech laws etc apply, how GDPR might be applied.
But for a virtual convention, this is not clear, nor for the virtual parts of a hybrid convention.
Its probably best to assert a location and word the code of conduct to give the environment you want.