Information Rights Officer

Powered by Water, Driven by Purpose
At Pennon Group, we’re proud to serve communities while protecting the environment. Together with our subsidiaries, South West Water, Bristol Water, Bournemouth Water, SES Water, Pennon Water Services and Pennon Power, we’re leading the way in water and renewables.
We’re proud to be recognised as a leader in the UK water sector, working towards a greener future. Our goals? As well as lowering our carbon footprint, we’re working with partners to plant 300,000 trees, restore peatlands and supporting farmers and landowners to improve water quality and wildlife.
Whether you’re starting out or seeking a new challenge, our scale and ambition create opportunities for you to shape your own career.
Ready to make a splash? Join our team today.
Information Rights Officer
Location: Based at our Exeter, Redhill or Bristol HQ, with regular travel to Exeter required during the initial training period and as needed to support business requirements.
Salary: £34,000 - £36,000 per annum plus excellent benefits
Contract: Full Time, Permanent
Help us deliver transparency, trust and compliance.
We're looking for a detail-focused and highly organised Information Rights Officer to join our Legal team.
This is a key role where you'll manage environmental information and data subject rights requests from receipt through to completion, ensuring responses are accurate, compliant and delivered within statutory deadlines.
Working closely with colleagues across the business, you'll help uphold our commitment to transparency, accountability and excellent customer service while supporting wider legal compliance and data protection activities.
If you're someone who enjoys analysing information, has an eye for detail, interpreting legislation, solving problems and working collaboratively with a wide range of stakeholders, we'd love to hear from you.
About the Role
As an Information Rights Officer you'll take ownership of Environmental Information Requests (EIRs), Subject Access Requests (SARs), and other information rights requests received from customers and employees.
You'll assess requests, gather information from across the business, review documentation, apply exemptions where appropriate and prepare legally compliant responses within strict statutory timescales.
Alongside managing requests, you'll support wider Legal Compliance and Data Protection activities, helping to improve processes, policies and awareness across the organisation.
Key Responsibilities
Information Rights Management
Manage Environmental Information Requests (EIRs), Subject Access Requests (SARs) and other information rights requests from receipt through to completion.
Assess and validate requests, identifying information that falls within scope.
Apply relevant exceptions, exemptions, restrictions and extensions where appropriate.
Liaise with colleagues across the business to obtain information required for responses.
Review information carefully to determine what can be disclosed, withheld or redacted.
Prepare accurate, professional and legally compliant responses.
Escalate complex, contentious or high-risk cases where required.
Ensure all requests are managed within statutory timescales.
Maintain accurate records and audit trails of actions and decisions taken.
Legal Compliance & Data Protection Support
Support the Head of Legal Compliance and Data Protection Officer with day-to-day activities and projects.
Assist with responding to data protection and legal compliance enquiries from customers and employees.
Contribute to the development and delivery of compliance and data protection training.
Assist with the review and maintenance of policies, procedures and guidance documents.
Identify trends, recurring issues and opportunities to improve how information rights requests are managed across the business.
Support continuous improvement initiatives relating to information governance and compliance.
What We're Looking For
The successful candidate will be able to demonstrate:
A good understanding of Environmental Information Regulations and UK Data Protection legislation.
Knowledge of individual rights, exemptions and restrictions.
Strong organisational skills with the ability to manage multiple competing priorities.
The ability to work independently and meet demanding statutory deadlines.
Excellent attention to detail and analytical skills.
The ability to determine what information is within scope of a request.
Confidence handling and reviewing sensitive or confidential information and maintaining confidentiality.
Strong written communication skills with the ability to explain complex matters clearly and concisely.
The ability to build effective working relationships across a range of teams and functions.
A collaborative approach and willingness to support the wider Legal team.
Essential Requirements
Educated to A-Level standard or equivalent qualification.
Alternatively, relevant professional experience that demonstrates the required knowledge and capability for the role.
Desirable Requirements
Qualification or formal training in Data Protection, Information Governance, Compliance, Legal Services or a related discipline.
Previous experience handling SARs, EIRs, FOI requests or similar regulatory information requests.
Experience working within a data protection, governance, compliance or legal environment.
What's in it for You?
We believe in recognising and rewarding the people who help us deliver for our customers every day. As our Information Rights Officer, you'll enjoy:
Competitive Salary - Reflective of your skills, experience and expertise.
Annual Bonus Scheme - Rewarding both individual and business performance.
Generous Pension Scheme - Helping you save for the future.
Flexible & Hybrid Working - Supporting a healthy work-life balance wherever possible.
Generous Annual Leave Allowance - Giving you time to recharge and spend time doing what matters most.
Employee Assistance Programme - Providing confidential wellbeing support whenever you need it.
Exclusive Employee Discounts - Access to a range of offers, discounts and benefits.
Learning & Development Opportunities - Supporting your continued professional growth within Legal, Compliance and Data Protection.
A Collaborative Team Environment - Work alongside experienced professionals who are committed to supporting your success.
Closing Date: 20th October 2026
We may close this vacancy early if we receive a high volume of applications. We encourage you to apply as soon as possible.
Please note that the successful candidate will be subject to a mandatory DBS check as part of the onboarding process.
Be yourself, we like it that way. Together, we will build a culture of belonging, where inclusion is instinctive. Diversity is our strength and a reflection of our communities. We care, we value everyone, we celebrate uniqueness.
Our core values, which are essential to our success, are:
Be Rock Solid - Build trust and be trusted. Be the one we all look to and can depend on.
Be You - We want you to bring your best everyday. Be yourself and make your mark in your individual way.
Be the Future - Embrace change. Drive Progress. Own the challenge.

- Department
- Business, Corporate and Support Functions
- Locations
- Exeter (Peninsula House), Bristol, Redhill
- Remote status
- Hybrid
- Salary
- £34,000 - £36,000/year
- Employment type
- Full-time
About Pennon Group
Founded in 1989, Pennon is a FTSE 250 listed company and one of the leading businesses in the UK water sector.
Serving a population of c.3.5million people and c.380,000 business customers, we're committed to supporting the lives of people and the places they love for generations to come.