do we need yet-another-framework (cue xkcd standards link) or do they actually need to support one or all of the many that already cover financial, medical and personal data?