Where I work if someone says they are leaving I can basically hit a “big red button” and immediately cut off any access to external email, internet, network drives, labs and also disable any write priveleges to external media.
We can also go back and look at any prior downloads and have the employee return any media or face penalty. Not a foolproof method. I had one guy leave who tried to get a coworker to download data for him instead.