The EU has data protection law which means companies that store personal data are legally obliged to protect it. I wonder if Apple are in breech of the law here

The EU has data protection law which means companies that store personal data are legally obliged to protect it. I wonder if Apple are in breech of the law here? Will someone affected make a complaint?