...EASA was providing a letter of approval to the European database suppliers that had passed the regulatory audit
Don't know about the FAA but...whilst EASA may have put such an arrangement in place, it seems that EASA is far from on top of the issue, primarily because of allegedly poor organisation, lack of resources (= adequate staff) and other institutional problems that are still impacting the organisation's ability to discharge its regulatory functions. As far as NSAs are concerned (i.e. State CAAs/DCAs/DGCAs) I'm not sure that there is still any really effective regulatory oversight of this.