I mean, under the CFAA you could probably pretty easily pursue charges when explicitly deauthorizing certain agents from accessing your data. Plenty of people have been threatened and prosecuted for less.

https://www.nacdl.org/Landing/ComputerFraudandAbuseAct