The School of Law of Utrecht University invites applications for a PhD candidate (4 years) within the NWO Vidi project: “With greater power must come great responsibility: attributing data protection compliance to those with real control.” This interdisciplinary project explores who really holds power in today’s web ecosystem, where website and app owners depend on powerful third-party tools, and how this should redefine responsibility under the General Data Protection Regulation.
Millions of websites rely on third-party tools for consent management, analytics, payments and other services that collect and process personal data behind the scenes. Under the GDPR, website owners are legally responsible for these data processing activities, even when they do not control the technology, have limited insight into how data is processed and cannot realistically ensure compliance. At the same time, these tools operate within complex networks of dependency, influence and manipulation, shaped by technical infrastructures, information asymmetries and interface designs that steer user behavior. While responsibility is formally assigned to those who embed the tools, power is often exercised elsewhere.
As a PhD candidate, you will:
-
Contribute to the development of a new conceptual framework for understanding power in data protection law.
-
Analyse case law on data controllership to identify manifestations of power
-
Investigate how power asymmetries and vulnerability shape individuals in digital environments, and examine insights from data protection, consumer and contract law.
-
and study concepts of power in platform regulation, including the DMA, DSA and P2B Regulation, and assess their relevance for GDPR regulation and enforcement.
You will join Utrecht University’s School of Law, embedded in a vibrant interdisciplinary network on Law & Technology and empirical legal studies. The project benefits from close collaboration with legal scholars from the School of Law research platform research platform on ‘Data, AI and Law’, ‘Empirical Legal Studies’ Lab, and ‘Utrecht Centre for Regulation and Enforcement in Europe’ (RENFORCE) and its various building blocks, and with interdisciplinary scholars from Utrecht University’s Institutions for Open Society (IOS).
You:
-
hold a Master’s degree in Law, with a specialization in EU data protection law
-
have knowledge of, or a strong interest in, platform regulation and consumer law
-
have experience with, or a demonstrable interest in, comparative legal research and empirical legal methods
-
have a strong interest in interdisciplinary research and the ability to engage critically with insights from other social science disciplines
-
enjoy working in interdisciplinary research environments and collaborating across disciplines
-
possess an excellent command of written and spoken English, enabling high-quality academic writing and communication
-
demonstrate scientific integrity, critical thinking skills and the ability to conduct independent research
-
are motivated to contribute to solutions for complex societal and legal challenges and to successfully complete a PhD within four years
-
have an interest in academic outreach, stakeholder engagement and networking, and are keen to maximize the societal and scholarly impact of your research.
-
a job for for 18 months. After a positive evaluation the employment will be extended to 4 years in total.
-
a working week of 36 - 40 hours and a gross monthly salary between € 3.059 and €3.881 in the case of full-time employment (salary scale P under the Collective Labour Agreement for Dutch Universities (CAO NU));
-
8% holiday pay and 8.3% year-end bonus;
-
a pension scheme, partially paid parental leave and flexible terms of employment based on the CAO NU.
In addition to the terms of employment laid down in the CAO NU, Utrecht University also offers a range of its own schemes for employees. This includes arrangements for professional development, various types of leave, and options for sports and cultural activities. You can also tailor your employment conditions through our Terms of Employment Options Model. In this way, we encourage you to keep investing in your personal and professional development. For more information, please visit Working at Utrecht University.
A better future for everyone. This ambition motivates our scientists in executing their leading research and inspiring teaching. At Utrecht University, the various disciplines collaborate intensively towards major strategic themes. Our focus is on Dynamics of Youth, Institutions for Open Societies, Life Sciences and Pathways to Sustainability. Sharing science, shaping tomorrow.
The Faculty of Law, Economics and Governance is a faculty at the heart of society, with a strong focus on social issues. Our subjects of Law, Economics and Governance give us a strong mix of academic disciplines that complement and enhance each other. This is a unique combination and a mark of our faculty's strength.
UU School of Law
The Utrecht University School of Law has provided quality research and education for more than 350 years. Constant innovation has enabled the School to maintain its leading position. Top-ranking research is conducted in all important legal fields: private law, criminal law, constitutional and administrative law, EU law, public international law. Researchers collaborate intensively with foreign partners, mainly from the angle of European and comparative law. The School of Law also conducts contract research and consultancy for other organisations. The extensive educational programme is based on academic research conducted within the faculty of Law, Economics and Governance. Students are trained to be highly qualified, internationally-oriented lawyers on the basis of modern didactical principles.
For more information, please contact dr. Cristiana Santos at [email protected]
Candidates for this vacancy will be recruited by Utrecht University.
As Utrecht University, we want to be a home for everyone. We value staff with diverse backgrounds, perspectives and identities, including cultural, religious or ethnic background, gender, sexual orientation, disability or age. We strive to create a safe and inclusive environment in which everyone can flourish and contribute.
Knowledge security screening can be part of the selection procedures of academic staff. We do this, among other things, to prevent the unwanted transfer of sensitive knowledge and technology.
To apply, please add the following documents to your application via the ‘apply now’ button:
-
curriculum vitae
-
a letter of motivation
-
one of your publications that you find most related to the topic of this position and/or chapter
-
contact information of 3 references.
Expected starting date in October 2026.
