HSBC fined £3 million by FSA over data security