GCMS Notes and ATIP Requests: How Pakistani Students Get Their Canada Refusal File (2026)

What are GCMS notes, and what is an ATIP request?

GCMS is the Global Case Management System, the database Immigration, Refugees and Citizenship Canada uses to process applications. When an officer works on your study permit, the entries they make sit in that system. People call the printout of those entries GCMS notes, though that is an applicant's phrase rather than an official one.

ATIP stands for Access to Information and Privacy, and it is the route by which you ask a Canadian federal institution to hand over records. Two separate statutes sit behind it, and choosing the right one is the entire trick.

Why the refusal letter is not enough

A Canadian refusal letter is largely a checklist. It tells you the officer was not satisfied that you would leave at the end of your stay, or that your purpose of visit was consistent with a temporary stay, and it ticks the relevant boxes. It rarely tells you which document triggered the doubt. The notes often do.

In the refused files we have read for students from Lahore, Gujranwala and Faisalabad, the officer's entry is short but specific. It names the thing that did not add up. That is a different starting point from the guesswork most students begin a second application with, and it is why our guidance on what Pakistani students should do after a student visa refusal puts this step before anything else.

Which of the two Acts applies to you?

This is the part that gets lost in translation, and it is the reason so many Pakistani families are told they need a Canadian friend or a paid representative.

The Privacy Act, for your own information

Anyone has the right to access their personal information held by government institutions that are subject to the Privacy Act. That is the Treasury Board's own wording, and IRCC says the same thing in its own words. IRCC states that Canadian citizens, permanent residents, and foreign nationals, regardless of where they are located, can request access to their personal information held by federal government institutions under the Privacy Act.

Read that twice if you have been told otherwise. A student sitting in Johar Town, refused last month, has a route to their own file that does not depend on anyone in Canada.

The Access to Information Act, for everything else

To send a request under the Access to Information Act you must be a Canadian citizen, a permanent resident of Canada, or an individual or corporation currently in Canada. That is the restriction people remember, and they then apply it to the wrong request. The Access to Information Act is the route for records about IRCC itself, for material created by IRCC, and for personal information submitted through a representative where the client is not a citizen, a permanent resident, or in Canada.

A note on the statute itself

The base text of section 12(1) frames the right of access around Canadian citizens and permanent residents, and section 12(3) gives the Governor in Council power to extend that right to other individuals by order, which is the mechanism behind the wider access IRCC and the Treasury Board now describe. We mention this because a student who reads only the Act, and not the department pages, can come away thinking the door is shut. Both IRCC and the Treasury Board describe the wider position in plain terms on their current pages.

What does it cost, and who is really charging you?

As of 23 September 2026, the IRCC Privacy Act page states that there are no fees involved with the processing of a request under that Act. As of 23 September 2026, the IRCC Access to Information page puts the fee for a request under that Act at $5.00. Those are the only two numbers in this process that come from the Government of Canada.

Everything else you are quoted is somebody's service charge. That is not automatically wrong. A firm that files the request, tracks it, and then sits with you for an hour explaining what the officer wrote is selling something real. What is not real is the suggestion that the government charges you tens of thousands of rupees for access to your own file.

• Ask any provider to separate the government fee from their fee, in writing.
• Ask whether they are filing under the Privacy Act or the Access to Information Act, and why.
• Check whether the price includes someone actually reading the notes with you afterwards.
• Be wary of anyone promising a particular outcome from the notes. Nobody knows what is in them until they arrive.

How do you actually file the request from Pakistan?

IRCC accepts the request through the ATIP Online Request tool, or on paper using its own form IMM 5563, the Treasury Board forms TBC/CTC 350-57 and 350-58, or a plain letter that names the Act and describes the records clearly enough for staff to find them. Online is faster and it gives you a tracking route.

What to have ready

1. A working email address you will still be using in three months.
2. Scanned copies of anything you want to attach, in the formats the portal accepts.
3. Your application number, the date of application, and the date of the refusal letter.
4. Your full name exactly as it appears on your passport, your date of birth, and your passport number.
5. A short, specific description of the records you want.

Writing the description properly

The Act requires you to give enough detail that the records are reasonably retrievable. A one line request saying "send me my file" is not that. Name the application, give the number, give the dates, and say which office processed it if you know. Our broader guide to getting a Canada study permit from Pakistan step by step explains where in the process your file number is generated.

Precision helps in a second way. A narrow, clearly written request is easier for an analyst to process inside the deadline than a sweeping one, and requests that force a search through a large volume of records are exactly the ones the department is entitled to extend.

When do you need the IMM 5744 consent form?

The consent form is IMM 5744, and IRCC describes it as the form for people who wish to authorise its ATIP Division to release their personal information to an individual that they designate. If your father, your brother in Toronto or your consultant is filing on your behalf, that form is what makes the request valid.

The IRCC Privacy Act page asks for the consent form for each individual listed on your file who is 16 years of age or older, while the Access to Information page says over the age of 18, so the two IRCC pages do not currently state the same age and the safe course is to file consent for everyone aged 16 and above. Filing consent for a sibling of 17 costs nothing and removes an argument.

One practical caution. The form authorises release of your personal information to a person you name. Name someone you trust, use an email address you control alongside theirs where the system allows it, and keep a copy of what you signed.

How long does IRCC have to answer?

Section 14 of the Privacy Act requires the head of the institution to answer within thirty days after the request is received. Section 15 allows that limit to be extended by a maximum of thirty days where meeting it would unreasonably interfere with the operations of the institution, or where consultations cannot reasonably be completed in the original period. The department must tell you about an extension, and how long it will be, inside the original thirty days.

Section 16(3) of the Privacy Act says that where the institution fails to give access within the time limits, it is deemed to have refused, and section 16(1) attaches a right to complain to the Privacy Commissioner. That remedy exists. It is also slow, and a student with an intake deadline in eight weeks should plan around the possibility of a late response rather than counting on a complaint to fix it.

IRCC has said publicly on its own ATIP pages that significant increases in request volumes may affect its ability to respond within the timelines the two Acts set. Treat thirty days as the legal floor, not as a delivery promise.

What do you do once the notes arrive?

Expect a PDF, expect it to be dry, and expect parts of it to be blacked out. Exemptions in the Act allow material to be withheld, and the response will cite the provision relied on where that happens.

Read it against the refusal letter, line by line

Put the two documents side by side. The letter tells you which boxes were ticked. The notes usually tell you why. Where the officer wrote about ties to Pakistan, look at what your application actually showed about family, property and employment. Where the officer wrote about the study plan, look at whether the course genuinely followed from your previous degree.

Sort what you find into three piles

• Things you can now prove properly, which is the good pile. Missing evidence is fixable.
• Points you explained badly, where the facts were fine but the presentation invited the question.
• Weaknesses that are true and unhelpful, such as a thin academic record or a course that does not follow from your background. These need a different plan, not a better letter.

That third pile is the one honest advice exists for. A reapplication that ignores it usually collects a second refusal, and refusals accumulate in your history. Our piece on why student visas get rejected from Pakistan and how to fix the common reasons goes through the patterns we see most often.

What do refused applicants get wrong at this stage?

Reapplying the same week

Speed feels like action. A second application filed before you know what the first one failed on is a coin toss with your record.

Paying for a Privacy Act request as though it were a paid service of the government

The processing fee under that Act is nothing. Pay a professional for their reading and their strategy if you want it, but know what the government's own charge is.

Asking for the wrong thing

Filing under the Access to Information Act from Pakistan, without a representative in Canada, is the common error. It is the route you are not eligible for, and it costs $5.00 to find that out.

Writing a vague request

An analyst cannot retrieve what you have not identified. Application numbers and dates are not optional details.

Treating the notes as an appeal

There is no appeal of a temporary resident refusal in the way families often imagine. The notes inform a fresh application, or a judicial review with a Canadian lawyer, and those are very different roads.

A worked example: Usman is refused in October

Usman is 22, from Lahore, applied for a study permit for a January intake at a college in Ontario, and receives a refusal in mid October citing purpose of visit and personal assets and financial status.

Usman lost one intake. He did not lose the plan. If the deposit question is familiar to you, our note on how much bank statement is needed for a Canada student visa from Pakistan explains what officers are actually testing, and the guide to the Provincial Attestation Letter for Canadian study permits covers a document that sinks files for a completely different reason.

Where the official pages contradict each other

We check figures against two sources before we publish them, and on this subject two of the checks came back inconsistent. Both are minor, and both are the kind of thing that wastes an afternoon if nobody warns you.

IRCC lists Visa, MasterCard, American Express, JCB and Visa Debit for the online fee, while the Treasury Board page says debit and prepaid credit cards cannot be used, so the two pages do not match and a plain credit card is the safer choice.

The second is the consent age, set out above. Neither contradiction changes the substance, and in both cases the cautious option costs you nothing. We are flagging them because a student following one page and meeting the other page's rule at the counter deserves to know why.

Timelines on the immigration side move too, and a refusal taken on its own tells you little about how long the next attempt will run. Our current reading of that is in how long a Canada study permit takes from Pakistan.

Frequently asked questions