Organizations already have paid $300,000 in fines but legislators want to know who made those key decisions