Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Privacy Impact Assessment (PIA) & Security Auditing

Open

International

Response Deadline11/19/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract involves performing Privacy Impact Assessments and security auditing for prime contractors working on City of Surrey parking projects. The scope of work includes reviewing physical, digital, and administrative safeguards to ensure full compliance with PCI DSS and British Columbia privacy legislation. The selected provider will be responsible for preparing independent attestations and audit reports, ultimately delivering a completed security certification and a Privacy Impact Assessment. This opportunity is associated with the Province of British Columbia and is categorized under NAICS code 541690.

General Info

Privacy Impact Assessments and security auditing for City of Surrey parking project compliance.

Agency

Province of British Columbia → City of Surrey

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

CAN

Set-Aside

NONE

Documents

This scope was carved out of 1220-030-2026-056.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Parking Mobile Payment App

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 5

subcontract

Response DeadlineNov 19

Submission deadline

Response Deadline

11/19/2026, 10:00:00 PM UTCin 14 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyProvince of British Columbia → City of Surrey

ContactsNo contacts available

OfficeN/A

Organization / AgencyProvince of British Columbia → City of Surrey

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs Privacy Impact Assessments (PIA) and security auditing for prime contractors on City of Surrey parking projects. Reviews administrative, digital, and physical safeguards to ensure compliance with British Columbia privacy legislation and PCI DSS. Prepares independent audit reports and attestations. Delivers a completed PIA and security certification reports.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, including SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 5 hours ago

DEADLINE

CMMC Level 2 Certification and NIST SP 800-171 Compliance ConsultingThis small business set-aside subcontract involves providing specialized cybersecurity auditing and certification services for prime contractors supporting DLA Weapons Support Maritime Hardware and Electrical projects. The primary objective is to ensure the protection of covered defense information by implementing safeguards in accordance with NIST SP 800-171 standards to achieve CMMC Level 2 certification. The selected provider must hold Third-Party Assessment Organization certification to conduct the necessary audits. Key deliverables for this engagement include the final CMMC Level 2 Certification and detailed Compliance Audit Reports. The opportunity is managed under the Department of Defense for the DDSP New Cumberland Facility.

DDSP NEW CUMBERLAND FACILITY

POSTED

about 16 hours ago

DEADLINE

FTD Safety and Cybersecurity EngineeringThe FTD Safety and Cybersecurity Engineering subcontract involves providing specialized system safety analysis and cybersecurity hardening for prime contractors supporting Army Contracting Command-Aberdeen Proving Ground projects for the Royal Saudi Land Forces. The primary objective is to ensure all training devices are protected through the implementation of rigorous cybersecurity protocols and strict adherence to MIL-STD-882E safety standards. Key deliverables include the production of comprehensive safety assessment reports and necessary cybersecurity certification documentation. Managed under the Department of Defense via the W6QK Acc-Apg-Orlando agency, this effort is categorized under NAICS code 541690. The work is to be performed in Saudi Arabia. Interested parties should note the posting date of November 5, 2026, with a response deadline set for November 18, 2026.

W6QK Acc-Apg-Orlando

POSTED

about 16 hours ago

DEADLINE

Vertical Transportation (Elevator) SpecialistThis subcontract opportunity is for a Vertical Transportation Specialist to provide technical specifications and design requirements for elevator machinery at Department of Veterans Affairs facilities in Central Western Massachusetts. The selected specialist will be responsible for defining system specifications, coordinating with Qualified Elevator Inspectors, and assisting in both pre-final and final acceptance inspections. Expertise in VA elevator standards is required to ensure all installations meet agency mandates. The scope of work includes the delivery of detailed technical specifications and comprehensive commissioning reports. Interested parties must respond by December 7, 2026, for this project managed under NAICS code 541690. The contract is administered by the Department of Veterans Affairs Network Contract Office 01.

241-NETWORK Contract Office 01 (36C241)

POSTED

about 16 hours ago

DEADLINE

in about 1 month

FAA Certified AH-1F Pilot ServicesThis subcontract opportunity with the Department of Defense for the Naval Air Warfare Center Air Division seeks an FAA Certified Commercial Pilot to provide safety pilot services for AH-1F aircraft. The selected contractor will support prime contractors during student and instructor exercises, ensuring the safe execution of flight hours and the maintenance of PIC logs. Primary responsibilities include conducting pre-flight safety briefings and operating aircraft in strict accordance with CNAF-M 3710.T and USNTPS visiting aircraft SOPs. Qualified candidates must possess a current AH-1F rating and maintain up-to-date FAA medical qualifications. The project falls under NAICS code 541690 and is centered in the 20670 zip code area. Interested parties should note the brief response window, with a deadline for submissions set for November 9, 2026.

Naval Air Warfare Center Air Division

POSTED

about 16 hours ago

DEADLINE

2 Senior Advisors Services for the NINDS Blueprint Neurotherapeutic Network for Small Molecules External Oversight Committee (EOC) Subject Matter Expert (SME) Services

Solicitation # 7571PS27Q00021

Solicitation 7571PS27Q00021 is a small business set-aside for a fixed-price purchase order to procure two Senior Advisors to serve as Subject Matter Experts for the NIH Blueprint Neurotherapeutics Network (BPN) External Oversight Committee. These executive-level advisors, specializing in Chemistry and Pharmacology, will provide strategic guidance and technical feedback on small molecule drug discovery and development projects. The scope of work includes attending monthly virtual meetings, participating in ad hoc milestone calls, and attending one annual on-site visit to the NIH campus in Bethesda, Maryland. The anticipated period of performance consists of a one-year base period starting November 2026, with two subsequent one-year option periods. The government expects a workload of 50 labor hours per year per advisor, with annual travel expenses capped at 2,000 dollars per consultant. Awards will be based on best value, with technical personnel qualifications weighted most heavily at 100 points, focusing on professional experience in small molecule drug discovery, advanced degrees, and collaborative team leadership. Price and past performance will also be evaluated for reasonableness and relevance. Quotations must include a key personnel narrative, resumes, letters of commitment, and a completed pricing template in Excel. All offerors must maintain active registration in the System for Award Management.

Omas Strategic Buying Center - Professional Services

POSTED

about 16 hours ago

DEADLINE

Stockton Metropolitan Airport (SCK) Access Control System (ACS) Assessment, Upgrade, Consulting, And Maintenance

Solicitation # 26319

The County of San Joaquin has issued solicitation 26319 for the Stockton Metropolitan Airport (SCK) to secure professional services for the assessment, upgrade, consulting, and maintenance of its Access Control System (ACS) and Video Management System (VMS). The scope of work includes conducting a full diagnosis of hardware and software components, implementing a prioritized repair plan, providing subject matter expertise for terminal and fence replacement projects, and performing ongoing preventative maintenance and emergency repairs. The contractor must ensure all systems remain compliant with TSA regulations and maintain current software support for Lenel, Lenel OnGuard, Milestone, and Crossmatch. The contract is structured for an initial two-year term with three optional one-year extensions, not to exceed five years in total. Qualified bidders must possess California C-7, C-10, and C-28 licenses and meet local preference requirements, including having a business license and a physical office or employees within San Joaquin County. Proposals are due by December 18, 2026, and will be evaluated based on service description, cost, deliverables, experience, and references. Award is contingent upon successful negotiations, and the agreement includes standard Net 30 payment terms and a 30-day notice provision for cancellation without cause.

County Of San Joaquin

POSTED

about 16 hours ago

DEADLINE

in about 1 month

Remote Pilot in Command (RPIC) ServicesThis subcontract for Remote Pilot in Command (RPIC) Services supports the Harbor Department of the Port of Los Angeles. The selected provider will perform remote piloting of unmanned aircraft for prime contractors, specifically staffing the unmanned aircraft console at the Threat Detection Center. Responsibilities include operating sUAS under public-agency COA and BVLOS authorizations, as well as maintaining all necessary aircraft logbooks and maintenance records to deliver operational flight hours. Qualified candidates must hold an FAA Remote Pilot Certificate under Part 107 and possess at least 100 hours of logged PIC time, with specific experience operating in controlled airspace. This opportunity is categorized under NAICS code 541690 and is based in Los Angeles. Interested parties must submit their responses by the deadline of December 9, 2026.

Harbor Department, Port of Los Angeles

POSTED

about 20 hours ago

DEADLINE

in about 1 month

On-Call Professional Economic Consulting Services

Solicitation # 232922

Port of Long Beach

POSTED

about 20 hours ago

DEADLINE

in about 1 month

Drone Operator (Remote PIlot)

Solicitation # 232903

The City of Los Angeles Harbor Department is seeking qualified contractors to provide remote pilots in command to staff the unmanned aircraft console at its Threat Detection Center in Los Angeles, California. Eligible operators must hold a current FAA Remote Pilot Certificate with a small UAS rating under 14 CFR Part 107, have completed recurrent training within the last 24 months, and possess at least 100 hours of logged flight experience. Additionally, operators must be capable of operating under a public-agency COA and BVLOS authorization. The scope of work prohibits operators from performing law enforcement functions or initiating flights without supervisor approval, and they must adhere to strict confidentiality and security protocols regarding criminal justice and Port infrastructure information. Proposals will be evaluated based on firm qualifications and experience, personnel and staffing, and the quality of the proposed work plan and management. To be considered responsive, bidders must submit a cover transmittal letter, a detailed narrative of qualifications with three client references, a technical approach, and an insurance verification letter. Required documentation includes City Ethics Commission Forms 50 and 55, and a Business Tax Registration Certificate. The contract is subject to the Los Angeles City Charter regarding fund appropriation and requires the contractor to maintain an Equal Employment and Affirmative Action Program. Final selection is subject to approval by the Deputy Chief of Public Safety and Emergency Management, the Executive Director of the Harbor Department, and the Board of Harbor Commissioners.

Harbor Department, Port of Los Angeles

POSTED

about 20 hours ago

DEADLINE

in about 1 month

Life Cycle Management and Quality Assurance SupportThis subcontract focuses on providing quality assurance and life cycle management support for prime contractors working on Department of National Defence projects. The selected provider will assist the Quality Assurance Manager in overseeing the manufacturing, repair, and overhaul of military components and systems to ensure strict adherence to the DQA Quality Management System. Due to the nature of the work, all personnel are required to hold Secret security clearance to deliver the necessary quality assurance and life cycle management outputs. The contract is issued by the Government of Canada for performance across several locations, including Ottawa, Gatineau, Montréal, and Montréal-Est within the National Capital Region. Interested parties must respond by November 26, 2026. The project falls under NAICS code 541690, emphasizing professional management and quality oversight for critical defense infrastructure.

Department of National Defence

POSTED

about 23 hours ago

DEADLINE

NYS Industrial Code Rule 59 (ICR 59) Safety ConsultantThis subcontract opportunity with the New York State Insurance Fund seeks a qualified consultant to provide workplace safety and loss prevention services for prime contractors working on policyholder projects. The selected consultant will be responsible for conducting safety audits and loss prevention assessments aligned with 12 CRR-NY 59 criteria to minimize insurance losses and workplace accidents. Key deliverables include the submission of comprehensive safety assessments, loss prevention plans, and detailed compliance reports. To be eligible for this role, candidates must hold a valid certification from the New York State Department of Labor as an ICR 59 Workplace Safety and Loss Prevention Consultant. The solicitation was posted on November 5, 2026, with a response deadline of December 21, 2026. This engagement falls under NAICS code 541690, focusing on specialized consulting services to ensure strict adherence to state safety regulations.

Insurance Fund - NYS

POSTED

about 23 hours ago

DEADLINE

in about 2 months

More opportunities from Province of British Columbia → City of Surrey

Same awarding agency

Software Implementation & User TrainingThis subcontract for Software Implementation and User Training supports the City of Surrey by providing project management, transition planning, and specialized training for prime contractors involved in parking projects. The scope of work includes the development of implementation schedules and responsibility matrices, as well as the creation of comprehensive user guidance and operational documentation. The selected provider will be responsible for conducting training sessions for City staff on administrative portals to ensure a seamless handover. Key deliverables for this engagement include a finalized transition plan, detailed operational documentation, and a cohort of trained personnel capable of managing the system.

Professional and Management Development Training

POSTED

about 9 hours ago

DEADLINE

Parking Enforcement Systems IntegrationThe Parking Enforcement Systems Integration subcontract involves providing technical integration services for prime contractors working on City of Surrey projects in Canada. The primary objective is to connect mobile payment applications with existing parking enforcement systems through the development of APIs and data bridges, ensuring that payment statuses are synchronized in real time for enforcement officers. The scope of work includes the execution of comprehensive test plans to verify data accuracy and the resolution of any integration defects. The successful contractor is responsible for delivering fully tested integrations along with a final test results report. This opportunity was posted on November 5, 2026, with a response deadline of November 19, 2026.

Computer Systems Design Services

POSTED

about 9 hours ago

DEADLINE

Payment Processing & Settlement IntegrationThis subcontract for the City of Surrey involves the supply and integration of a secure electronic payment processing engine designed for prime contractors managing parking projects. The scope of work includes establishing transaction flows between applications and financial institutions, configuring settlement and remittance processes, and implementing bundled fee options. The selected provider is responsible for delivering a fully integrated payment processing system and providing monthly revenue reconciliation reports. A critical requirement of the contract is mandatory PCI DSS compliance to ensure the security of all financial transactions. The project is categorized under NAICS code 522320 and is performed within Canada. Interested parties must adhere to the response deadline of November 19, 2026.

Financial Transactions Processing, Reserve, and Clearinghouse Activities

POSTED

about 9 hours ago

DEADLINE

Mobile Payment App & Administrative Portal DevelopmentThis subcontract involves the development and configuration of a production-ready mobile application for iOS and Android, alongside a web-based administrative portal, to support parking projects for the City of Surrey. The selected provider will be responsible for creating scalable systems that allow for the addition of new parking locations and the efficient management of operational and transaction data. Key deliverables include the fully configured application, the administrative portal, and comprehensive technical interface documentation. The project mandates strict adherence to PCI DSS standards for payment security and full compliance with British Columbia privacy legislation. Interested parties must respond by November 19, 2026, for this Canadian-based initiative managed under the Province of British Columbia.

Custom Computer Programming Services

POSTED

about 9 hours ago

DEADLINE

Parking Mobile Payment App

Solicitation # 1220-030-2026-056

The City of Surrey is soliciting proposals for a Parking Mobile Payment App to maintain continuity of its current services while integrating new innovations and value-added capabilities. The scope of work includes the provision of software, configuration, integration, training, and ongoing support. Key deliverables include a detailed implementation and transition plan. The solution must adhere to strict security and privacy standards, specifically the Payment Card Industry Data Security Standard (PCI DSS) and British Columbia privacy legislation, including a mandatory Privacy Impact Assessment. Proposals will be evaluated based on the proponent's experience, reputation, resources, technical capabilities, and financial proposals, with the City reserving the right to select the most advantageous offer rather than the lowest price. Financial proposals must cover three specific transaction fee scenarios: contractor exclusivity, non-exclusivity, and end-user payment of fees. The contract includes a term that can be extended for up to four additional one-year periods. Payment terms require parking fees to be remitted by the 15th day of the following month, and the City maintains the right to terminate or reduce services if funds are not appropriated for the current fiscal year. Contractors must maintain Workers Compensation Board coverage and a safety program meeting occupational health and safety requirements. The City also retains the right to inspect personal information and management policies at the contractor's premises. Proposals must be submitted as a single PDF file to the procurement office by the deadline.

Computer Systems Design Services

POSTED

about 9 hours ago

DEADLINE

Pipe Conditioning and TreatmentThis subcontract opportunity involves providing chemical conditioning and treatment services for piping systems at City of Surrey District Energy Transfer Stations. The selected contractor will work under prime contractors to execute pipe conditioning processes using specific chemical agents and application equipment, ensuring all work adheres to standard DES Specifications to deliver a system ready for service. The project is located in Canada and is associated with the City of Surrey and the Province of British Columbia. Interested parties must submit their responses by the deadline of November 23, 2026. The contract is categorized under NAICS code 541620, focusing on environmental consulting and specialized technical services.

Environmental Consulting Services

POSTED

DEADLINE

Valve and Actuator SupplyThis subcontract agreement concerns the supply of CSA-approved valves, operators, and actuators for prime contractors working on the City of Surrey District Energy Transfer Stations projects in Canada. All supplied components must conform to Section 15109 specification sheets and carry recognized certifications from bodies such as CSA, CGA, ULC, ITS, ETL, cUL, or cMET. The selected supplier is responsible for providing full technical documentation, manufacturer literature, and a recommended spare parts list alongside the equipment. Interested parties must submit their responses by November 23, 2026, as part of this procurement process managed through the Province of British Columbia.

Industrial Valve Manufacturing

POSTED

DEADLINE

Mechanical InsulationThis subcontract for Mechanical Insulation involves the supply and installation of thermal insulation and protective jacketing for prime contractors working on City of Surrey District Energy Transfer Stations projects. The scope of work includes applying PVC and aluminum jacketing to piping and installing removable insulation blankets for specific equipment such as pumps, flow meters, strainers, and heat exchangers, all in accordance with DES Specifications. The project is located in Canada and is managed under the agency of the City of Surrey within the Province of British Columbia. Interested parties must submit their responses by the deadline of November 23, 2026.

Roofing Contractors

POSTED

DEADLINE

Pipe Hangers and Supports FabricationThis subcontract for the City of Surrey involves the fabrication and installation of hangers, anchors, guides, and restraints for District Energy Transfer Stations. The selected contractor is responsible for providing approved fabrication and shop drawings for both stainless steel and carbon structural steel supports using ASTM A36 materials. The project requires strict adherence to industry standards, including CSA CAN3-S16-1-M and various MSS specifications such as SP-58, SP-69, SP-77, SP-89, SP-90, and SP-127. The final deliverables consist of fully installed piping support systems and all associated approved technical drawings. Responses for this opportunity are due by November 23, 2026.

Fabricated Structural Metal Manufacturing

POSTED

DEADLINE

Mechanical Piping InstallationThis subcontract for Mechanical Piping Installation involves the installation of process mechanical piping systems for prime contractors working on City of Surrey District Energy Transfer Stations projects in Canada. The scope of work includes welding stainless steel pipe, performing pressure and hydrotesting for Type S03 piping, and executing necessary flushing, cleaning, and passivation. Additionally, the contractor is responsible for installing piping through concrete and masonry, ensuring all penetrations are properly fire-stopped to deliver a fully tested and operable system. Qualified bidders must provide TSBC certified welders who are compliant with ASME B31.1, B31.9, CSA W59-M, and CSA W47-1 standards. The solicitation was posted on November 3, 2026, with a response deadline of November 23, 2026. This project falls under NAICS code 238220 and is associated with the City of Surrey and the Province of British Columbia.

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

DEADLINE

District Energy Transfer Stations

Solicitation # 5526-003-11

Solicitation 5526-003-11 is a unit price contract issued by the City of Surrey Engineering Department for the construction of two District Energy System Energy Transfer Stations and associated interior piping. The project is located at the Juno and Sky Living buildings in Surrey City Centre, British Columbia. The scope of work encompasses the supply, installation, and commissioning of all mechanical and electrical equipment, piping, and communication conduits. An optional scope for Nitrogen Corrosion Protection Installation is also included. The project must adhere to the MMCD 2019 Edition and the City's Supplementary MMCD 2024. The contractor must commence work within five days of the Notice to Proceed and achieve substantial performance within 170 days. Award criteria are based on the Owner's discretion and may include the tenderer's experience, project history, schedule performance, and the ability to work effectively with stakeholders. Required submissions include a single PDF file containing the form of tender, schedule of quantities and prices, a preliminary construction schedule, and documentation of superintendent and subcontractor experience. Strict quality and administrative requirements are in place, including the use of ISO 9001:2000 registered manufacturing facilities and installers meeting MSS SP-89 standards. All equipment must be clearly labeled with 3 mm lamoid labels, and materials must be stored in original manufacturer packaging. The contractor is responsible for obtaining all necessary permits, including those from Technical Safety BC. Financial security is required in the form of a performance bond and a labour and material payment bond, each valued at 50% of the contract price.

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

DEADLINE

Flood Protection ConstructionThis subcontract opportunity involves the installation of flood protection infrastructure for prime contractors working on City of Surrey riverfront projects. The scope of work focuses on the construction of flood mitigation structures located adjacent to the Nicomekl River in Canada. Due to the technical nature of the project, candidates are required to possess specialized experience in flood protection civil works to ensure the successful delivery of the installed systems. The solicitation was posted on November 2, 2026, with a response deadline of November 27, 2026. Classified under NAICS code 237990, the project is associated with the City of Surrey and the Province of British Columbia. Interested parties should refer to the official procurement portal for submission guidelines and further technical requirements.

Other Heavy and Civil Engineering Construction

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS