British Airways fined record £20m for data breach