ComplyIQby SentriCore
Book a demo

Compliance dashboard

A worked example — Northwind Health, a 42-person clinic network in Montreal.

Active frameworks

PIPEDA · PHIPA

Manage frameworks
Overall readiness
50%
Open obligations
6
Evidence artifacts
10
Next review
Sep 30, 2026

Readiness by framework

  • PIPEDA56%
  • PHIPA (Ontario)50%

Priority obligations

ControlCitationsOwnerDueStatus
GOV-01 · Governance & accountabilityDesignate a privacy officer and publish contact detailsHigh
  • PIPEDA Sch. 1, 4.1
  • PHIPA s. 15
M. Tremblay2026-08-14In progress
CON-01 · Consent & transparencyPublish a bilingual privacy notice at every collection pointHigh
  • PIPEDA Sch. 1, 4.2 / 4.3
  • PHIPA s. 18
M. Tremblay2026-09-01In progress
SAF-01 · SafeguardsApply role-based access control to systems holding personal informationHigh
  • PIPEDA Sch. 1, 4.7
  • PHIPA s. 12(1)
J. Nguyen2026-07-15Complete
SAF-02 · SafeguardsLog and audit access to personal health informationHigh
  • PHIPA s. 10(1) / O. Reg. 329/04 s. 6(3)
J. Nguyen2026-09-20Not started
INC-01 · Incidents & breachesMaintain a breach register and notification procedureHigh
  • PIPEDA s. 10.1 / 10.3; Breach of Security Safeguards Regulations, s. 6
  • PHIPA s. 12(2)
S. Lavoie2026-09-05Not started
GOV-02 · Governance & accountabilityMaintain a record of personal information holdingsMedium
  • PIPEDA Sch. 1, 4.5
  • PHIPA s. 13
A. Okafor2026-07-30Complete
RGT-01 · Individual rightsOperate an access and correction request procedureMedium
  • PIPEDA Sch. 1, 4.9
  • PHIPA s. 52
S. Lavoie2026-09-09Not started
VEN-01 · Vendors & transfersSign data processing terms with every service providerMedium
  • PIPEDA Sch. 1, 4.1.3
  • PHIPA s. 17
A. Okafor2026-08-22In progress
TRN-01 · Training & awarenessCollect annual privacy training attestations from staffLow
  • PIPEDA Sch. 1, 4.1.4
  • PHIPA s. 15(3)
J. Nguyen2026-10-15Complete