[matt4077]

Most corporate malfeasance is dealt with in civil law, not criminal. The EU specifically has almost no role in criminal law anyway, because that power remains with the nation states.

The reason is mostly that the corporation also got the profits from such actions, so it makes sense to target that entity with sanctions as well. The system is also designed to encourage companies to create processes to root out bad behaviour, instead of silently encouraging it and denying all responsibility, instead making individuals take the fall.

Another reason is that in many of these cases it's not obvious where and when a policy originated, at what point it started breaking the rules, etc.

Of course there are still crimes that can get managers into trouble, such as bankruptcy, all sorts of counterfeiting, fraud, etc.