>

Basically I don't want people to direct bad actions and not be held liable for them.
Wouldn't that person simply be a scapegoat? It would be very easy for a large company like Google to simply throw a scapegoat at an issue so that the company itself would be able to avoid consequences. What would the punishment even look like? Would the scapegoat be fined? If so, the company would be avoiding the consequences by putting the fine on the scapegoat. >

No. It would be the CEO >

And if there is no CEO? Say it is a co-op, who gets to be criminally responsible for the actions of others in a co-op? Should this also apply to nonprofit organizations?