The basis on which the U.S. has designated countries on that list has less to do with the security of information for Americans. Actually, it's the other way around. Europeans, of course, have strong privacy laws, and they have put pressure on the U.S. government, saying, “You should protect the information of our citizens—Poland, etc.—in an adequate way; otherwise, we will not share information with you.”
On September 18th, 2017. See this statement in context.