Engineers Clinic
IntermediateSecurity trackCA-CP-25

PIPEDA / Law 25 Privacy Impact Assessment Toolkit

Internship role: Privacy Analyst Co-op. A tool that walks a product team through a PIA, flags Quebec Law 25 obligations and exports the assessment with a risk register.

10 Guided Steps240h Internship TierSubmit: GitHub repo or evidence pack + live demo / report + README + milestone logbookVerified CertificateAI Rubric Graded
Program Overview

Internship role: Privacy Analyst Co-op. A tool that walks a product team through a PIA, flags Quebec Law 25 obligations and exports the assessment with a risk register.

What you submit

GitHub repo or evidence pack + live demo / report + README + milestone logbook

Stack: TypeScript, PIA templates, PostgreSQL

How it is graded
  • Scope & method20

    Written scope and rules of engagement, and a method that follows a named framework (OWASP, NIST, MITRE ATT&CK).

  • Findings quality30

    Each finding has steps to reproduce, evidence, a severity rating with reasons, and affected assets.

  • Remediation20

    Fixes are specific, ranked by risk, and at least one is shown working.

  • Evidence & files15

    Logs, screenshots, scripts or configs that a reviewer can check.

  • Report for a manager15

    A one-page summary a non-technical manager can act on.

Pass 60% · Merit 75% · Distinction 90%

Learning Outcomes
240-hour Canada programme. Quebec's Law 25 added mandatory PIAs and heavy fines
Canadian firms need lightweight tooling.
Target Audience

Engineering Students

Diploma, B.Tech, B.E., BCA, MCA, or M.Tech students seeking practical experience.

Aspiring Developers

Developers who want to build proof-of-work capstone projects for tech resumes.

Job Seekers

Graduates looking for AI-evaluated code review & verified industry credentials.