Simplest thing to say is: find all the people responsible for this, from the bottom to the top, and charge them with the same crime as an individual would be. I would include everyone in the chain from the programmers that implemented it, to the VP that authorised it, and finally to the CEO because all responsibility ends with them (that's why they get paid the big bucks right?).

I'd like to say look at Volkswagen for an example but I don't know if all the necessary people were charged.