There's no two ways about it, personal liability is needed.
Seconded.
The problem here is NHS Chief Execs / "leadership" teams get bonuses and promotions by cutting costs. This means that lower quality staff are hired, training is curtailed and pressure is piled on the few competent workers who remain.
In this environment, breaches are inevitable.
However, when the happen, the PUBLIC as a whole takes the hit, not the people directly. The fine comes out the NHS operating budget while the management continue to get their bonuses.