REWE International $9M GDPR fine a lesson in managing subsidiary risk
A recent decision by the Austrian Data Protection Authority (DPA) has underlined the fact parent companies are ultimately responsible for how their subsidiaries manage people’s data, even if the offshoot entity operates entirely on its own. Austrian food retailer REWE International this month was fined 8