Skip to content
This is NOT an official site of the Government of Canada. Click here for the official AI registry.

AI-Assisted Triage for Work Permit Eligibility

Border & Immigration

What it collects that can identify you

Sensitive personal information
Identifiable data
  • Application data provided directly by IEC WP applicants, including personal identifiers such as name, date of birth, country of citizenship, passport details, and country of residence. This data is classified at the Protected B level and is sourced from IRCC's Global Case Management System (GCMS).

Also collects operational data, which is anonymized data.

Run by
Immigration, Refugees and Citizenship Canada (IRCC)
Where
No fixed location
Kept
Retained not specified in the AIA; subject to IRCC's standard retention schedules under PIB PPU 054
Shared with
Accountable organization
Your copy
You cannot see the data it holds about you. What you can do

What it is for

This system automatically assesses the eligibility of International Experience Canada (IEC) Working Holiday Program applications by applying pre-defined rules about age, citizenship, passport validity, and country of residence. Routine, clearly eligible applications receive an automated positive eligibility assessment; all other applications are reviewed in full by an immigration officer. IRCC officers make the final approval or refusal decision on every application — the system cannot refuse or recommend refusals.

What it collects and what happens to it

Data taken in

Sensitive personal information
Identifiable data
  • Application data provided directly by IEC WP applicants, including personal identifiers such as name, date of birth, country of citizenship, passport details, and country of residence. This data is classified at the Protected B level and is sourced from IRCC's Global Case Management System (GCMS).
Operational data
Anonymized data
  • Legislative, regulatory, and contractual requirements for each IEC subprogram and participating country — including program-specific eligibility thresholds such as age limits and residency requirements derived from bilateral agreements with 36 countries and territories. This data frames the rules the triage model applies.

Processing

Classification & Prediction
  • The system applies pre-defined rule-based criteria (not machine learning or advanced analytics) to classify each IEC WP application into a triage stream. Applications meeting all non-discretionary eligibility criteria are assigned a positive eligibility assessment; all others are flagged for full manual review. Advanced analytics were not used to generate the model criteria for the Summer 2023 launch.

What it does

Deciding (Analytical AI)
Human decides
  • The model applies pre-defined business rules to classify and triage IEC applications into streams: those eligible for automated positive eligibility assessment and those requiring full manual review. It produces a triage result (a classification) but cannot refuse or recommend refusals — an IRCC officer decides the final outcome on every application.

Outputs

A recommendation or prediction
Identifiable data
  • An Excel spreadsheet presenting each application's triage result (positive eligibility assessment or requires full review) alongside key application data drawn from GCMS. The output is presented in a neutral way to avoid influencing the officer's individualized admissibility assessment. The system never produces a refusal or a refusal recommendation.

Run by

Immigration, Refugees and Citizenship Canada (IRCC)
  • IRCC is the federal department that deploys and operates this system to triage IEC Working Holiday Program applications. IRCC officers make the final approval or refusal decision on every application processed by the model.

Government of Canada AI Register — IEC Work Permit Eligibility Model

Built by

Not stated by the Helpful Places.

Kept for

Retained not specified in the AIA; subject to IRCC's standard retention schedules under PIB PPU 054
  • Personal information used by the system is governed by Personal Information Bank PPU 054. An audit trail recording all system recommendations, decision points, and version history is maintained. The AIA does not specify a concrete retention period beyond these frameworks.
  • Duration: not specified in the AIA; subject to IRCC's standard retention schedules under PIB PPU 054

Shared with

Available to the accountable organization
  • The triage output (Excel spreadsheet with triage result and key application data) is available to IRCC processing staff and decision-makers. Access to the system is controlled by a permission management process that grants, monitors, and revokes access. An audit trail records all recommendations made by the system, identifies the authorized decision-maker, and is version-controlled.
Not available to me
  • The triage output spreadsheet and the model's internal logic are not directly accessible to IEC work permit applicants. Applicants are informed of the system's existence through public notices and receive explanations of decisions when required, but cannot access their individual triage result or the system's internal workings directly.

Stored

Stored on 3rd Party Cloud
  • The system interfaces with other IT systems including the Global Case Management System (GCMS). The AIA confirms the system is not within a closed network (it has connections to other systems) and that data classified at Protected B is involved. Specific cloud or on-premises hosting details are not disclosed in the AIA.
  • Duration: not specified; subject to IRCC IT infrastructure governance
How to read the colours

Can it identify you?

Anonymized data
Data about people with the link to who is broken. Stripped of identifiers, blurred, aggregated, or noised so this system can’t reasonably tie a record back to an individual.
Pseudonymous data
Each person’s data is tied to a token (hash, ID, template) that lets this system recognise the same person across events, but the token itself doesn’t reveal a name. Reidentification is possible with extra information.
Identifiable data
The data either contains a direct identifier (name, address, account name, recognisable face or voice, plate number) or carries a token this system uses to look up legal identity during processing.

Who completes the loop?

Human decides
This mode suggests; a person decides what to do next. The AI is always advisory — a human is in the loop on every decision. Example: a triage tool ranks cases for a clinician who chooses which to see first.
Human executes
This mode decides; a person carries out the result. Example: an optimizer plans the day’s trash-collection routes, and drivers run them.
Autonomous
This mode decides and acts on its own. No person reviews each decision or carries out the resulting action.

Definitions from the DTPR standard. Amber is about your data, violet about who decides. The fuller the shape and the deeper the colour, the more identifying the data or the less a person is involved.

What you can do

Ask about this system

Questions go to the Helpful Places, not the vendor.

Your rights

  • Right to Be Informed of AI UseApplicants are informed that an automated system is used during the processing of their IEC work permit application. A plain language notice is posted through all service delivery channels (internet, in person, mail, and telephone), the privacy notice on application forms has been updated, and a web notice was published on the day the system launched. This is required under the Directive on Automated Decision-Making.
  • Right to a Human ReviewIRCC officers make the final decision to approve or refuse on all IEC work permit applications. Applications that receive an automated positive eligibility assessment are still manually assessed by officers for admissibility before a final decision is rendered. All applications not triaged for automated positive assessment receive a full individual review of both eligibility and admissibility by an officer. The system enables human override of its assessments, and overrides are logged.
  • Right to ContestA recourse process is established for clients who wish to challenge a decision made on their IEC work permit application. Explanations of decisions that result in denial must be provided in plain language, including the role of the automated system, the criteria used, the output produced, and the principal factors that led to the decision. Clients are informed of relevant recourse options. Contact IRCC through official immigration service channels to initiate a review.
  • Right to an Explanation of a DecisionWhere a decision results in the denial of a benefit or service, applicants have the right to a meaningful explanation in plain language that covers: the role of the automated system in the decision-making process; the training and client data used and how it was collected; the criteria used to evaluate their data; the system's output and how to interpret it; and the principal factors that led to the final decision. This explanation must also describe relevant recourse options. These requirements are mandated under the Directive on Automated Decision-Making (TBS).
  • Right to Non-discriminationApplicants have the right to non-discriminatory treatment by this system. The model's rules are based only on data elements with a clear link to legislative, regulatory, and contractual requirements — not on protected characteristics. A Gender-Based Analysis Plus (GBA+) was conducted addressing impacts on gender and other identity factors. Rules are reviewed by officers, legal, policy, and data science experts for bias before introduction and at regular intervals. An ongoing quality assurance process monitors for discriminatory outcomes.

Risks and safeguards

  • Civil liberties harmThe triage function could influence officer decision-making or introduce discriminatory outcomes in immigration processing.Safeguard: The system is limited to flagging clearly eligible applications for positive assessment and never refuses or recommends refusals; all admissibility decisions remain with officers. Rules are reviewed by experienced officers, legal, policy, and data science experts, and senior executives before introduction and at regular intervals. A Gender-Based Analysis Plus was conducted on the data. An ongoing quality assurance process monitors whether officers reach the same positive eligibility assessments as the system to detect any bias introduced. Triage output is presented neutrally and officers are trained never to let it substitute for their individualized assessment.
  • Reputational harmApplicants in the non-triaged stream could experience longer processing times than those receiving automated positive assessments, creating unequal treatment perceptions.Safeguard: The model makes no recommendation regarding applications not triaged for automated positive eligibility assessments — each must be assessed individually by a decision maker. Clear messaging in officer training reinforces the obligation for individualized assessment. The project monitors for differential processing time impacts. The system cannot produce a stigmatizing label — it only facilitates approvals.