This varies by country for sure. At my current company, you do not have this right. The device and all data on it belongs to the company and they can do what they want with it.