Sadly iirc the US laws that makes GDPR compliance problematic cover subsidiaries so making them independant enough is probably more or less impossible in practice.