The large company has a whole team with expertise to work on the task - they don't implement it but handle legal affairs and the process. It is implemented by hundres of employees all over the company. A small startup has one person without a clue (and I gave talks about GDPR).