The OASIS Cross-Enterprise Security and Privacy Authorization (XSPA) Technical Committee has submitted two profiles for public review. The XSPA Profile of the Security Assertion Markup Language (SAML) for Healthcare 1.0 describes a framework in which SAML is encompassed by XSPA to satisfy requirements pertaining to information-centric security within the healthcare community. The XSPA Profile of the eXtensible Access Control Markup Language (XACML) supports cross-enterprise security and privacy authorization. Both public reviews end 13 March 2009.