Yes, they do - the problem is when they schedule sales after being made aware of insider information but before it is released to the public.

Obviously a CEO will have knowledge of some things that won't me made public during a scheduled stock sale, like upcoming product roadmaps that may not be released yet, etc. It's impossible to completely avoid this, but scheduling a sale after a breach or major security vulnerability in your products is discovered and well before public disclosure is not okay.

I'm glad this Equifax exec got what he deserved, Krzanich should get the same treatment.