> How do you prevent this sort of thing, especially at a huge company?

You don't have to when you're a huge American company. No one is risking prison time, and the fines are a drop in the bucket considering FB's profitability.