Toothless fines. Indict corporate officers or employees that did it... then you’ll get change.
Unless they knowingly and intentionally broke criminal law, that's completely over the top and unnecessary. Fines should presumably start small and have a graduated structure to prevent the "just a business expense" approach from becoming a viable one. The current regulatory problems are due almost entirely (IMO) to lack of active enforcement; why care what the penalty is if you know it won't happen to you regardless…
Why? If I drive drunk and a cop pulls me over, lack of knowledge is no defense. As the head of a company, why is a lack of knowledge of the goings-on of the company a defense? If you don't know the goings-on when you are in a position to, at the very least that should be categorized as criminally negligent.