The Information Commissioner’s Office (ICO), the data regulator, has fined outsourcing business Capita £14m for failing to protect the security of 6.6m pension savers’ records.