NHS IT systems supplier facing up to £8m in fines