Best practices for ex staff and their devices - Security/Compliance

I am afraid there is no good answer for this. There are no best practices here as everything will eventually come down to each organizations own security policy. In my personal opinion, a leaver's record can be retained for a set duration, but as a good housekeeping practice, it is also good to clean the inactive and stale objects after this set duration has passed.