It's kind of a gray area though. Do you just jail the CEO if a company does evil? What if it was someone else inside the company and the CEO didn't know? And conversely, what if the CEO knew and is trying to pass off like they didn't, how do you prove it? It turns into slippery slopes pretty fast.
My personal solution would be just to actually scale up the fines. If someone gets fined for something they profited from, it's extremely stupid for the fine to be less than their profit. You're basically telling them to do it again.