CBSA has used DNA testing on some detainees since at least 2016. Now, it’s making national rules