The answer is yes to all of the above.
Again, not to be flippant, but if it's something that has to do with a member's personnel file, it should be in their file. If it is something to do with an accusation of inappropriate behaviour or sexual misconduct, whatever that may be, it may not be captured in a personnel file and would end up being an ATIP request. There aren't many other ways to get access to that information.