Postdoc Vidi Project: Power & Responsibility

The NWO Vidi project “With greater power must come great responsibility” is an interdisciplinary initiative hosted by the School of Law at Utrecht University, bringing together experts in law, computer science, and empirical research to examine power asymmetries in the web ecosystem. The project focuses on how third‑party tools—such as consent management platforms, analytics services, and payment processors—collect and process personal data behind the scenes, often without the knowledge or control of website owners. Despite being legally responsible under the General Data Protection Regulation (GDPR), website owners frequently lack real influence over the technologies they embed, creating a mismatch between legal liability and actual control. The postdoctoral researcher will play a central role in generating the empirical evidence needed to reconcile this disparity and inform future regulatory frameworks.

The postdoc will lead the empirical and human‑computer interaction (HCI) components of the project. Responsibilities include designing and conducting interviews, focus groups, and mixed‑methods studies to understand decision‑making around the adoption of third‑party tools by website owners and developers. The researcher will analyse documentation such as privacy policies, terms of service, and user interfaces to identify dark patterns and information asymmetries. Additionally, the postdoc will examine third‑party website‑building platforms for UI/UX assessment and may contribute to technical investigations, such as implementing tracking tools or analysing network traffic, to uncover how data flows through complex dependency chains.

Applicants must hold a PhD in Computer Science, Human-Computer Interaction, Privacy, or a closely related field. A strong background in HCI with demonstrable experience in designing and conducting empirical user studies is essential. Candidates should also show an interest or experience in privacy‑focused HCI design, data protection law, and platform ecosystems. Experience collaborating across disciplines—particularly with legal scholars or computer scientists—is highly desirable, as is familiarity with web implementation or web measurement techniques. A genuine interest in engaging with societal stakeholders such as regulators, market actors, and civil society organizations is also valued.

The position is a full‑time temporary appointment for two years, with a working week of 36–40 hours. The gross monthly salary ranges from €4,728 to €6,433 (scale 11 under the Collective Labour Agreement for Dutch Universities, CAO NU), supplemented by 8 % holiday pay and an 8.3 % year‑end bonus. Additional benefits include a pension scheme, partially paid parental leave, and access to Utrecht University’s professional development schemes, sports and cultural activities, and flexible employment conditions via the Terms of Employment Options Model. The role is based on‑site at the Utrecht University campus in the city of Utrecht, Netherlands.

To apply, candidates must submit a curriculum vitae, a motivation letter (maximum two pages), a representative publication related to the project’s topic, and contact details for three referees via the ‘apply now’ button on the AcademicTransfer website. The application deadline is 10 July 2026 at 21:59 UTC. Interviews are expected to take place during July 2026, with the successful candidate anticipated to commence shortly thereafter, subject to mutual agreement.

This postdoc offers a unique opportunity to work at the intersection of law, technology, and empirical science, contributing to timely debates on data protection and platform regulation. The researcher will gain valuable interdisciplinary training, build a network of academic and non‑academic partners, and develop skills that are highly sought after in academia, public policy, regulatory bodies, and the private sector. The project’s outcomes aim to produce practical insights and tools that can support more realistic and effective GDPR compliance for website owners and polic