The CBSA reply was surprising to me. I submitted it on Jun 19 with the incorrect authorization form. However, they still provided me the information on July 3.I received the CSIS notes, still waiting for the CBSA notes, ordered them around the same time last month. The CSIS notes is a letter, exactly as the photograph describes in this link: https://www.thestar.com/news/privacy-blog/2015/05/what-happens-when-you-request-your-csis-file.html
What does your CD say ?