Duty of candour: BMJ investigation reveals patchy enforcement