A Brighton trust may become the first NHS body to be fined by the ICO after a contractor that it paid to destroy hundreds of hard drives instead sold them on eBay.