At top banks a major purpose of the regulatory department is to make sure nobody can be blamed for anything. Banks would rather pay billions of fines because no executive is going into engage in a more coherent compliance regime if it means risking jail for something nobody understands. It is common at certain commercial banks to deliberately engage in ignorance, at the risk of being find very large sums, simply to avoid the discovery risk--of regulators being able to pin blame on someone who raised some concern.
Recently the regulators have been hinting executives will be held responsible for systemic failures in their bank. Bankers have been responding by ensuring full compliance with regulations. Just kidding, nobody knows how to fully comply with bank regulations. Bankers have generally responded by ceasing high-risk activity completely. For example, there are tens of thousands of Somali refugees in the US. To my knowledge there is no commercial bank that will help them send money home to their families. Somalia is simply too high risk.