I think it probably just boils down to keeping a paper trail and policies to employees explicitly stating that such behavior will make you criminally and civill

I think it probably just boils down to keeping a paper trail and policies to employees explicitly stating that such behavior will make you criminally and civilly liable. When a violation occurs, throw the malefactors under the bus like and go on about your business.