>There's not much more you can do in that situation.
Indeed - and yet that is an entirely unworkable situation. e.g. The stuff on my laptop is covered by three countries' regulators/boards of directors/jurisdictions, none of whom will be understanding if I tell them the border stasi copied all the data ably assisted by yours truly with decryption keys
Very much doubt I'd still be employed even if innocent & had no choice
>Revoke keys
With financial data once its been duplicated it's gone / out in the wild.