If people act with gross negligence, then yes, we should arrest them. How that is defined may depend on a variety of factors, though, and is something that already has relevant case law in related fields.

Executives, definitely yes. One person should be responsible for automated systems and services. The CEO is the most logical choice.