Comment by KingOfCoders

It's the same with GDPR. When I worked for a large enterprise, we had a legal/compliance team of dozens of people and a huge outsourced legal budget. When I worked in the startup of my wife, it was me implementing GDPR compliance.