I think under the European Aviation and Airport Security Regulations access cards have to be returned to the company/issuing authority immediately as a condition of cessation of contract. Failure to do so might involve sanctions on those that are still in employ.