This also depends on the territory.

In Germany there have been court cases where the court has ruled that the points are 'owned' by the company, and not the employee (except private trips of course). And hence the company can claim access to the account and the points within them and use them.