Immigration case records: requests to IRCC, CBSA and CSIS

This is the internal system that IRCC uses to process cases.

Full name:

Global Case Management System (GCMS).

IRCC describes GCMS as an integrated system that is used to process immigration, civil and some passport cases.

It can store, for example:

• client information;
• application data;
• processing history;
• documents and results of inspections that are relevant to the case;
• employee records and notes;
• decisions and actions on the file.

Colloquially, a package of records received from IRCC through an information access request is often referred to as a GCMS record.

But it is important to understand:

GCMS records are not a separate official document with a guaranteed set of pages.

The composition of the answer depends on:

• what records you requested;
• what records the department has;
• unloading dates;
• applicable restrictions on disclosure of information.

IRCC maintains the bulk of immigration application records.

If you want to understand what information is in IRCC's immigration file, the request can usually cover records under IRCC's control.

Depending on the wording of the request and the case itself, the response may include:

• application data;
• history of file actions;
• staff notes;
• information about documents;
• the results of individual checks reflected in the system;
• correspondence or records related to the processing.

But don't expect the answer to be:

• full internal commentary from each department;
• real-time status on the day the PDF was received;
• the exact date of the future decision;
• an explanation for each delay;
• result forecast.

The resulting package is a snapshot of records at a certain point in time, and not a direct window into the current state of affairs.

The CBSA maintains its own records, not the “enhanced version of GCMS.”

The Canada Border Services Agency (CBSA) is responsible for, among other things, border and immigration enforcement issues and certain immigration functions.

The CBSA also has access to the GCMS to perform its tasks, but this does not mean that a request to the CBSA will automatically produce the same package as a request to the IRCC.

It makes sense to request records through the CBSA if you are looking for information that is specifically under the control of the CBSA.

For example, these could be:

• certain CBSA immigration records;
• records related to immigration control, if they exist;
• travel history or other border records;
• records created by the CBSA as part of its functions.

The exact set depends on what you requested and what records actually exist.

CBSA records do not need to be ordered “just in case” just because IRCC takes a long time to process an application.

CSIS may maintain records related to security clearances, but it is not an immigration status verification service.

The Canadian Security Intelligence Service (CSIS) is involved in separate review processes on security matters.

CSIS expressly states that its security clearance program may contain records related to immigration and civil security clearances.

But there is a fundamental limit:

CSIS does not make permanent residency decisions.

The final immigration decision is made by IRCC.

CSIS also explicitly states that it does not respond to routine requests for the status of individual immigration security clearances. For such questions you need to use the official IRCC tools or, if you want to request records, ATIP.

ATIP Division at CSIS:

• processes requests for records;
• does not interfere with the inspection;
• does not speed up verification;
• cannot change the queue or outcome of the review.

This is a common way to request records from federal agencies.

ATIP is a system for access to information and personal data protection (Access to Information and Privacy).

This is a system through which you can formally request government records or your personal information from a federal agency.

It is important to choose:

1. the right department;
2. correct request type;
3. a fairly accurate description of the required records.

Most of these requests can be made through the Government of Canada's online ATIP service.

A representative is not always needed.

Old common advice:

"if you are not in Canada, GCMS can only be ordered through a Canadian representative"

too general now.

Under current IRCC guidance, a foreign national may request their own personal information under the Personal Data Protection Act, regardless of location.

The representative becomes important in other scenarios, for example:

• you want to make a request under the Access to Information Law, but you do not have the right to make such a request yourself;
• the request is submitted on behalf of another person;
• records containing personal information of other persons are needed.

In such situations, you need to check the current consent rules and the form required by the chosen agency.

The more accurately you describe the required records, the clearer the task of the ATIP unit.

You don't have to write a long legal letter.

It is useful to indicate:

• name;
• date of birth;
• unique customer number (UCI), if available;
• application number, if available;
• type of application;
• approximate period for which records are needed;
• specifically what records you want to receive.

For example, instead of:

"send everything you have"

better to describe:

"Please provide a copy of the records related to my application for permanent residence, including case notes and processing history by application number..."

The exact wording depends on the agency and your purpose.

You cannot ask for someone else’s personal information without permission simply because the person is a family member.

If the request concerns the information of another person, the agency may require written consent.

For IRCC, there is a form IMM 5744 - Consent to Request Access to Information and Personal Data.

The CBSA also has its own forms and instructions for transmitting personal information to a representative.

If there is a spouse, sponsor, or other adult involved in the records being requested, you should check to see if their consent is required for the specific request.

This is especially important if the request is made by a representative.

Not all information must be disclosed.

When preparing a response, the ATIP unit checks what information the law allows you to provide.

Therefore, the package may contain:

• fully opened pages;
• partially closed fragments;
• numbers of articles of the law next to the closed fragment;
• pages that do not open;
• messages that certain records were not found or could not be confirmed.

A black block in PDF does not automatically mean:

• problem in the case;
• negative decision;
• security issue;
• presence of secret unfavorable information.

This only means that a particular fragment is not disclosed in the resulting version.

The closed fragment must be interpreted carefully and in context.

Time passes between the upload of records and the delivery of the response.

An ATIP packet is a snapshot of the data that existed at the time the records were searched and prepared.

So far the ATIP division:

• searches for records;
• conducts an inspection;
• applies the grounds for limiting disclosure;
• prepares issuance,

The immigration case itself may continue to move forward.

Therefore it is quite possible:

• the record indicates the old status;
• new information has already appeared in your IRCC personal account;
• One issue was decided after the date of recording.

Always look at the date of recording, not just the date you received the PDF.

The law sets a basic period, but extensions are possible.

For formal requests under the Access to Information Law and the Personal Data Protection Law, the legislative scheme provides for a response within 30 calendar days, but the agency may legally extend the period in prescribed cases.

For example, an extension of the deadline may be necessary due to:

• large volume of records;
• complex search;
• consultations with another agency or third party.

Therefore, we cannot promise:

“GCMS records will arrive in exactly 30 days.”

For CSIS, current official information specifically warns that the high volume of immigration requests is creating significant delays.

No.

An ATIP request and an immigration application are separate processes.

Query by records:

• does not move the application in the queue;
• does not force the officer to open the file faster;
• does not expedite security checks;
• does not create an obligation for IRCC to make a decision earlier.

CSIS specifically emphasizes that its ATIP unit cannot interfere with security review reviews.

If the goal is only:

"remind yourself"

ATIP is not an acceleration tool.

When you want to understand what records are in the main immigration file.

For example:

Long wait

You want to see the available processing and recording history, but understand that the batch will be a historical snapshot.

Data discrepancy

You need to understand what information is reflected in the system and whether there are any obvious inconsistencies with what you submitted.

Denial

Want to further examine the records after a refusal.

However, as of May 2026, IRCC automatically provides officer decision notes along with the refusal letter for most permanent residence applications, so a separate ATIP request is not always the first necessary action following a refusal.

Preparing for the next action

You need to understand the context that is already reflected in the state file.

When you need information, the CBSA has it.

For example:

• certain boundary records;
• travel history;
• records related to immigration control, if any;
• records created by the CBSA in connection with a specific immigration matter.

If your goal is:

“I want regular Express Entry application processing records”

starting with the CBSA just because “there are sometimes more details” is not a good idea.

When the purpose is to request personal records that may be held by CSIS.

CSIS may have immigration and civil security audit records.

But a request to CSIS must be made with realistic expectations.

The answer may be:

• contain only part of the information;
• have closed fragments;
• do not confirm the presence of some records;
• do not provide a clear scale for “security review 70% complete”;
• do not explain the future completion date of the review.

And most importantly:

Don't assume that CSIS is involved in your case just because the background check is a long process.

Usually not.

Three queries at the same time do not automatically give a more accurate picture.

First formulate a question:

“What happens to my immigration application to IRCC?”

Start with IRCC records.

“I need specific CBSA records.”

Submit your request to the CBSA.

"I need CSIS records if they exist"

Submit your request to CSIS.

If you cannot articulate what records you want from a particular agency, it is better to first determine the purpose rather than choosing an agency based on advice from a forum.

Current official communications on the case always take precedence.

If the records say one thing, and after the date of the record IRCC sent a new letter, you need to rely on the current letter and current instructions.

You especially can't wait for an ATIP response if you already have:

• request for documents with a deadline;
• biometrics instruction letter;
• medical instructions;
• IRCC pre-decision letter of doubt (PFL);
• passport request;
• another letter requiring action.

ATIP does not suspend time limits in immigration cases.

Find the dates and facts first, then try to interpret the abbreviations.

Useful order:

1. Determine the upload or recording date

This way you understand how recent the information is.

2. Find basic information about the application

Application number, category, office, main dates.

3. View notes in chronological order

What was recorded about the case and when.

4. Separate system fields from officer notes

Not every field represents a different officer's decision.

5. Pay attention to closed fragments

Don't overthink their content.

6. Match entries with newer IRCC letters

A new official announcement may already change the picture.

This is especially important if you are reading the package yourself.

Be careful with conclusions:

• “IRCC will definitely approve”;
• “security check is definitely completed”;
• “the case is with CSIS”;
• “the officer doesn’t check anything else”;
• “the decision will be in a week”;
• “closed fragment means problem”;
• “if the field is empty, the stage has not yet started”;
• “If the status is “verification passed”, it can no longer be revised.”

Records are useful as case documents.

They do not guarantee a future solution.

Please indicate the purpose of the request and whose information you require. The agency's choice depends on what records it maintains; legal basis and consent are verified separately.

A separate analysis is especially useful if:

• the package is large and contains many system abbreviations;
• there is a refusal and the records need to be compared with the decision letter;
• there is a PFL or other serious request;
• the recording shows discrepancies with what was submitted;
• it is unclear which agency owns the required record;
• there are closed fragments to which it is easy to attribute the wrong meaning;
• you need to decide whether a second request to CBSA or CSIS is required at all;
• there are newer IRCC letters that need to be matched against records.

Initial Consultation: Zoom · 50 minutes · CAD 160 + taxes.