It also shifts culpability to the individuals; aka CYA for the org. Corporate counsel will say "We have training for this every year; they knew they were not supposed to do that,and we weren't aware they were doing that, so it's not our fault"
Very important to highlight this; since joining a different big tech company I have quickly realized how much the internal processes (everything from expenses to security posture) are structured to put the maximum responsibility on the person furthest down the totem pole.
In small European companies I've worked for this would be considered a big red flag and a sign of broken company culture, but for US companies it is seemingly the norm.
Try working for a big European company, it’s no different.
Size brings more savvy lawyers.