This is a bit different, because they internally knew something was wrong but didn’t do the right thing.

You try to legislate ethical behaviour but the root cause is that there’s no moral obligation for a company to do good.