This particular use of Trusted Execution is meant to be used against Large Organizations, not individuals. No one is going to revoke that ability in your example in the context of what I propose.

Also, it's not meant to be a complete solution by itself. It's meant to be a tool supported by other legislation. So it would totally be possible for Facecorp to crawl the web and put together a non-revokable database of private individual's information, outside of Trusted Execution engines. But to do so, they have to go to that effort, instead of just sweeping user data.