It is wasteful inefficient regulation. Just fine companies 10% of revenue for not following the rules and everyone will comply. Give 1% of the fine to the whistleblower. Market mechanisms.