Who is really accountable for the online safety gap?

There has a flurry of regulatory activity on online safety around the world with no consensus on the best approach. How should companies and governments respond?