If your requested your GCMS notes under the Privacy Act, you will see some information redacted under section 21, which is exactly the same corresponding sections as s 15 of the Access to information act.
International affairs and defence
21 The head of a government institution may refuse to disclose any personal information requested under subsection 12(1) the disclosure of which could reasonably be expected to be injurious to the conduct of international affairs, the defence of Canada or any state allied or associated with Canada, as defined in subsection 15(2) of the
Access to Information Act, or the efforts of Canada toward detecting, preventing or suppressing subversive or hostile activities, as defined in subsection 15(2) of the
Access to Information Act, including, without restricting the generality of the foregoing, any such information listed in paragraphs 15(1)(a) to (i) of the
Access to Information Act.
All GCMS notes will have information for security redacted under section 21.
If your security is blank, you will see s21 on the top right of the page. Since Security related details are always redacted and on this page at the top right corner This indicated that your security is either in progress or even may have been passed. See
https://bit.ly/2S1rxlY
Once your security is passed, your application will go though a final review and then a decision will be made on it.