Yes. Law 25 applies extraterritorially. If you have customers, website visitors, or newsletter subscribers in Quebec, you are collecting their personal information and the law applies to your organization, regardless of where you are based. This includes businesses in Ontario, British Columbia, and other Canadian provinces, as well as US companies that sell to or market to Quebec residents. The Commission d'accès à l'information (CAI) has stated this position.