NHS trust removes staff from duty during data-breach inquiry