This is simplistic, but it's a start for a discussion: you look at the organizational chart, start from the bottom where the people working on the product are, punish all the line from there up to the board (all the C*).

Then people will start asking questions about what they are told to do, because they know that if they do something wrong they're going to jail or have to pay the fines themselves, not a bank account of the company. And they won't have much else to go to get shielded from responsibility, because all jobs will be like that. Even our own jobs.