Do you want to explore power and controllership to determine who should be responsible for data protection compliance? Join our team!

The School of Law of Utrecht University invites applications for a PhD candidate  (4 years) within the NWO Vidi project: “With greater power must come great responsibility: attributing data protection compliance to those with real control.” This interdisciplinary project explores who really holds power in today’s web ecosystem, where website and app owners depend on powerful third-party tools, and how this should redefine responsibility under the General Data Protection Regulation.

Your job

Millions of websites rely on third-party tools for consent management, analytics, payments and other services that collect and process personal data behind the scenes. Under the GDPR, website owners are legally responsible for these data processing activities, even when they do not control the technology, hav...