There are plenty of tales of those who have misplaced personal data on trains, bars and even rubbish skips. A contractor to a Japanese council passed out on the street after a night out and temporarily lost a USB containing personal data for 460,000 residents. 

The EU Commission recognises Japan as having laws that adequately protect personal data to GDPR standards. Thankfully the USB stick was encrypted and the police found it later. Nevertheless, I imagine the council will be facing awkward questions as to why one individual - its contractor - had so much personal data on a USB stick.