Not so sure about the dynamics when it is a group of people with individual and collective reporting obligations and knowledge isn't just with one individual.
I do agree with you that a proper regulatory framework with clearly defined obligations is better than one off overly-punitive fines and arrests.