Service 1 · the wedge
MFIPPA readiness assessment
A fixed-scope diagnostic: exactly where your institution stands against the January 1, 2027 obligations, and the prioritized list of what to close first. Defined scope, defined price, no open-ended engagement.
The problem it solves
You cannot close a gap you have not measured.
Most small institutions know the deadline is coming but have no clear picture of how far off they are, or where to start with six months of runway. The readiness assessment turns "we should probably look at this" into a specific, ordered plan a clerk can act on and take to council.
Scope
What the assessment covers.
What's included
- A structured review across five areas: governance and ownership, PIA readiness, breach response, safeguards, and documentation.
- An inventory of the personal-information collections you already run (payroll, permits, recreation, bylaw enforcement, CCTV) and which will need assessment.
- A written, prioritized gap report: what is missing, ranked by exposure and by the effort to close it.
- A sequenced plan to reach readiness before January 1, 2027, sized for your staff and budget.
- A short readout call to walk council or senior staff through the findings.
What's not included
- Performing the Privacy Impact Assessments themselves. That is Service 2, quoted separately.
- Legal advice or legal opinions. Where a question is legal, the report says so and involves your institution's legal services.
- IT implementation or remediation. Safeguards are assessed and recommended, not built.
- Acting as your privacy officer of record. Ongoing support between engagements is available as part of PIA and privacy support.
What Tectonix needs from you
Light lift on your side.
One working session
A call with the clerk or CAO (and whoever touches records or IT) to understand how the institution actually runs.
A look at what exists
Any current policies, a rough list of the software and vendors that handle personal information, and the forms residents fill out.
A point of contact
One person to answer follow-up questions. No preparation or clean-up needed beforehand; assessing the real state is the point.
Start with the readiness question.
A 30-minute scoping call establishes whether you have a gap worth closing. If you don't, you'll be told so.