While organisations are only ever hit with affordable financial penalties, it's rational for them to weigh up the likely penalty vs. the opportunity cost of not doing something illegal in their decision-making.

If we want to prevent such behaviour (and in case it's not clear from the above, I think we should) then we either need far more brutally punative financial penalties, or for executives to be held personally and criminally liable in such cases.