Join us as a Postdoc in the NWO Vidi project With greater power must come great responsibility. The project aims to identify who truly exercises power in today’s web ecosystem and how responsibility under data protection law should be attributed accordingly. You will lead the empirical and HCI components of the project by conducting interviews and other user studies, analysing third-party tools and web platforms, and investigating how website owners navigate complex technological dependencies. Help shape future data protection regulation through interdisciplinary research.
The School of Law of Utrecht University invites applications for a Postdoctoral Researcher (2 years) within the NWO Vidi project “With greater power must come great responsibility: attributing data protection compliance to those with real control.” This interdisciplinary project explores who really holds power in today’s web ecosystem, where website and app owners depend on powerful third-party tools, and how this should redefine responsibility under the General Data Protection Regulation, combining law, computer science, and empirical research.
Millions of websites rely on third-party tools (for consent solutions, analytics, payment and other services) that collect and process personal data behind the scenes. Website owners are legally responsible under the General Data Protection Regulation, even when they don’t control the technology, don’t understand what data is being processed and can’t realistically comply. At the same time, these tools operate within complex chains of dependency, influence, and manipulation: from technical infrastructures and information asymmetries to interface design choices that steer decisions. Responsibility is formally assigned to those who embed the tools but power is often exercised elsewhere.
The postdoc is expected to carry out the following tasks:
Design and conduct empirical studies (e.g., interviews, focus groups, or mixed-method approaches) to understand decision-making around third-party tool embedding;
-
Study documentation of third-party tools (e.g., privacy policies, interfaces, terms of service);
-
Analysis of third-party website building platforms for UI/UX assessment;
-
Contributing to technical investigations (e.g., implementation of third-party tracking tools or network traffic analysis) is welcome.
Thus, the postdoc will primarily lead the HCI and empirical components of the project, working closely with legal and computer science collaborators.
Your work will be central to the project’s empirical contribution, including identifying and characterizing power asymmetries in the integration and use of third-party tools into websites, generating empirical evidence on how control is exercised, constrained, or obscured in practice; uncovering mechanisms such as information asymmetry, dependency, and interface design (e.g., dark patterns); translating findings into practical insights and tools to support more effective and realistic GDPR compliance.
Profile
-
PhD in Computer Science, HCI, Privacy or related field
-
Strong background in Human-Computer Interaction (HCI), with demonstrated experience in designing and conducting empirical user studies
-
Experience or clear interest in privacy-focused HCI design, data protection and/or platform ecosystems
-
Experience in collaborating across disciplines (e.g., with legal scholars or computer scientists) is highly desirable
-
Demonstrable affinity with web implementation or web measurement is a plus, but not required
Interest in collaborating with societal stakeholders, such as regulators, market actors, and civil society.
-
a temporary position for 2 years.
- a working week of 36 - 40 hours and a gross monthly salary between € 4.728 and €6.433 in the case of full-time employment (salary scale 11 under the Collective Labour Agreement for Dutch Universities (CAO NU));
-
8% holiday pay and 8.3% year-end bonus;
-
a pension scheme, partially paid parental leave and flexible terms of employment based on the CAO NU.
In addition to the terms of employment laid down in the CAO NU, Utrecht University also offers a range of its own schemes for employees. This includes arrangements for professional development, various types of leave, and options for sports and cultural activities. You can also tailor your employment conditions through our Terms of Employment Options Model. In this way, we encourage you to keep investing in your personal and professional development. For more information, please visit Working at Utrecht University.
A better future for everyone. This ambition motivates our scientists in executing their leading research and inspiring teaching. At Utrecht University, the various disciplines collaborate intensively towards major strategic themes. Our focus is on Dynamics of Youth, Institutions for Open Societies, Life Sciences and Pathways to Sustainability. Sharing science, shaping tomorrow.
The Faculty of Law, Economics and Governance is a faculty at the heart of society, with a strong focus on social issues. Our subjects of Law, Economics and Governance give us a strong mix of academic disciplines that complement and enhance each other. This is a unique combination and a mark of our faculty's strength.
UU School of Law
The Utrecht University School of Law has provided quality research and education for more than 350 years. Constant innovation has enabled the School to maintain its leading position. Top-ranking research is conducted in all important legal fields: private law, criminal law, constitutional and administrative law, EU law, public international law. Researchers collaborate intensively with foreign partners, mainly from the angle of European and comparative law. The School of Law also conducts contract research and consultancy for other organisations. The extensive educational programme is based on academic research conducted within the faculty of Law, Economics and Governance. Students are trained to be highly qualified, internationally-oriented lawyers on the basis of modern didactical principles.
Utrecht University’s School of Law is embedded in a vibrant interdisciplinary network on Law & Technology and empirical legal studies. The project benefits from close collaboration with international and local partners: empirical work will be supported by INRIA, providing expertise in Online privacy and Web measurements. Within Utrecht University, you will also engage with the Faculty of Science, which offers strong support in Human-Computer Interaction. Working at the intersection of HCI, law, and web infrastructure, the project team will publish in leading venues across law, HCI, and interdisciplinary domains.
For more information about this position, please contact dr. Cristiana Santos at [email protected].
Candidates for this vacancy will be recruited by Utrecht University.
As Utrecht University, we want to be a home for everyone. We value staff with diverse backgrounds, perspectives and identities, including cultural, religious or ethnic background, gender, sexual orientation, disability or age. We strive to create a safe and inclusive environment in which everyone can flourish and contribute.
Knowledge security screening can be part of the selection procedures of academic staff. We do this, among other things, to prevent the unwanted transfer of sensitive knowledge and technology.
To apply, please send your curriculum vitae, including a letter of motivation, via the ‘apply now’ button.
Documents to apply:
curriculum vitae
letter of motivation (max. 2 pages)
one of your publications that you find most related to the topic of this position and/or chapter
contact information of 3 references.
Interviews are expected to take place during July 2026.
