Scottish NHS trust ducks fine after staff shared patient data via WhatsApp