Employees acting on behalf of the company aren't going to be held personally liable.

Then who is?

If something warrants a prison sentence, but for some reason it was such an employee that performed the act, does this mean nobody can be arrested?

why?