Yes, HIPAA applies to any entity that handles the data of at least one US citizen, regardless of their location. If you deal with PHI of US citizens, you must comply with HIPAA regulations. Other countries and regions may have similar data protection regulations, such as GDPR in Europe and the UK.