Replying to @Septimaeus@infosec.pub
That would be the Board of directors for the company since they select the CEO or virtual equivalent. But current laws don’t support bringing anything against a CEO for a company’s wrongdoing. Even less for the board of directors.