Data loss by HSBC that led to a £3.2 million fine was an example of poor training and could be the first of many fines dished out.