you don't need to be "legally responsible" to not want unnecessary covid exposure on your campus!
The next step before wondering why someone used their keycard to access a building they shouldn’t be near could be just removing the access?
The best way to get people to leave has to be removing reasons to stay, for example access to campus resources.