The other option is jailing those who direct companies to break laws. It works for criminal organizations, why doesn't it work for companies?

If anyone will be going to jail within a corp, it's usually some low-level scapegoat and rarely the C-suite.