It is very difficult to regulate the behaviour of larger organisations. Their boards profess - and often believe - that they are excellent corporate citizens - even if Google no longer tells its employees to 'Do No Evil!'. But they inevitably almost always act in their own self-interest, whilst their Boards may be totally unaware of the risks being run by junior employees and/or distant parts of the organisation.
What went wrong before ....
Why do we so often fail to learn from previous tragedies.?
What could we do to Improve the Effectivness of Regulation?