Companies have been using data brokers to get info on potential employees for ages in violation of the law. The law has almost zero enforcement and when something is done nobody does to prison. It's almost always just the government wanting a cut of the action. For example:
Prison is a limitation of freedom of movement. The equivalent for a company should be the limiting of movement of shares (no shares bought/sold/traded) for the duration of an imposed sentence. Since corporations are people and all, there needs to be an equivalent punishment.
They literally hire someone to be the head of the company, and pay them obscene amounts to set the company culture and policies but somehow they mostly avoid being responsible for bad company behaviour.
Prison for illegal behaviour should be applied to the C suite.
That just leads to the classic scheme of hiring a scrapegoat CEO, while in reality the company is being run by a person who technically holds a lesser title.
Going that route instead of fines it should be a percentage of ownership made public. That:
1. Dilutes that shares, punishing the people who can effect the most change (shareholders)
2. Puts the government on the inside. With ownership, the government can then demand access/knowledge that they can't from a purely private company. And no company is going to want to deal with that headache if they don't have to.
That assumes that the state is punishing companies for criminalitythat it would also be a good idea to own. While that might sometimes be the case, it certainly isn't always the case.
Unless that percentage was over 100% of the profit they'd still be making money from doing illegal things and the fines just become a cost of doing business.