The cover-up of a serious hack and data theft by ride-hailing company Uber could earn it a heavy fine from the UK's data watchdog.