It's difficult to tell if your company is meeting the EU's data privacy and security standards -- or US standards, for that matter.