Why should an employee have to 'take them on'? If a company has broken the law then simply bringing it to the attention of the relavent government agency should be sufficient for that agency to act.
If the law breaking is common place then there should be no reason for the individual to carry the can. (Different if it is a single breach and hence the person is easily identifyable.)