You just have to say that you need dedicated figures for some decisions, like you already need for GDPR or financial compliance or certifications, and ultimate responsibility is always of the ceo.

...like it already happens in europe, or at least in Italy.

This is basic law and risk management in society. Let's not pretend we have just invented corporations and don't know what to do with them yet.