Temporary resident application -> Officer case notes -> Electronic
You figured it out already, but it's Privacy Act if you want records about yourself; Access to Information Act if you want records about someone else, especially if they do not have legal status in Canada yet.