The other option is jailing those who direct companies to break laws. It works for criminal organizations, why doesn't it work for companies?