Case Study: Bertelsmann achieves centralized, scalable GDPR compliance for its subsidiaries with OneTrust

How Bertelsmann Manages GDPR for its Subsidiaries with OneTrust

Bertelsmann, one of the world’s largest media groups with hundreds of subsidiaries and 117,000 employees across 50 countries, faced a growing data protection challenge as its businesses shifted from traditional print and broadcast to digital channels. That digital expansion increased processing of personal data and made GDPR compliance a group-wide priority. To manage this complexity centrally while allowing local adaptation, Bertelsmann selected OneTrust (using products such as Assessment Automation for PIAs/DPIAs and Data Mapping) to support its global privacy program.

OneTrust implemented a centralized, roles-based privacy management platform with pre-defined documentation, templates and workflows that subsidiaries can adapt to local requirements. The solution replaced manual, Excel-based processes, enabled granular DPO access and pushed records-of-processing tasks to business owners, improving auditability and reporting and making it easier to demonstrate GDPR compliance and respond to incidents. OneTrust’s tools also position Bertelsmann to address future regulations like ePrivacy and streamline consent and tracking management across its businesses.

Bertelsmann

Sebastian Schlender

SVP & Chief DPO