The problem is that this opens up an obvious vulnerability - underfund the department that's supposed to ensure compliance so that you effectively end up breaki

The problem is that this opens up an obvious vulnerability - underfund the department that's supposed to ensure compliance so that you effectively end up breaking the law at scale and yet retain this plausible deniability. The only way out is to reverse the situation - companies should have even less leniency. You can't expect a single person to know the specifics of every law or to pay attention 100% of the time, but you can absolutely expect a company to be able to hire the necessary manpower to ensure near-bulletproof compliance.