I have no doubt that companies push around sensitive data they've collected on us using XML. That's the type of insane bullshit you'd expect from bureaucracy.