The word here is not "regulate" it's "enforcement".
People doing illegal things should face personal responsibility on the actions. So do managers who approved it.
The issue with enforcement is the same thing that happened in 2008: enforcing white collar crimes is expensive and high risk for prosecutors who want slam dunks to advance their careers