Once I thought about the same thing but I think it's quite hard to create an organization that can deeply track what other companies are doing in terms of user privacy (and then provide an official badge for it). But I have to say that there is already a big difference if a website stores data in US or Europe.