It means they're not complying with European Union laws. Whether you think complying with a law is synonymous with protection, or security or privacy is up to your experience and worldview.