PhD researcher 'EU Data Liability'

The Tilburg Institute for Law, Technology, and Society (TILT) is looking for a PhD Researcher in the area of EU data liability who has a strong interest in combining a data protection and economic law perspective on issues relating to liability for the collection and use of data for the project 

An Internet of Secure Things – INTERSECT
The Internet-of-Things (IoT), which seamlessly connects the digital and the physical world, is turning out to be one of the weakest spots in the global digital infrastructure. Billions of physical devices with computing and networking capabilities both exacerbate the privacy and security risks of ‘traditional’ IT settings and create an entirely new threat surface. A pervasive cyber-physical system of systems, entwined with a myriad of IoT devices, will oversee our lives and economy, while at the same time, from a privacy and security perspective, being completely unmanageable at scale.

The amount, heterogeneity, and varying longevity of IoT devices challenges conventional information, application, and network security practices. It constitutes a serious threat to our ability to safeguard individuals’ security and safety, on the one hand, and their privacy and data protection rights, on the other hand. IoT devices are different from traditional computing infrastructure in that they are oftentimes dispersed across large geographical areas, even when operated by the same entity, which renders updating and fixing them oftentimes complicated and costly. Their product support lifespan is frequently shorter than the period during which they are used or installed, which results in a plethora of old devices riddled with vulnerabilities and ripe for exploitation deployed in the wild. The IoT category is also extremely heterogeneous and diverse when compared to ‘traditional’ computing infrastructures: the intermixture of millions of disparate IoT devices and applications, manufactured and managed in countries all over the globe, compounds the challenges of supervising, handling, and controlling the cyber-physical domain.

The INTERSECT project thus holds that traditional security paradigms, based on targeted solutions developed and deployed specifically for each system, are doomed to eventually fail. Such assessment is compounded by the fact that such a heterogeneous, complex, and globe-spanning environment is easily mismanaged by its human component. The INTERSECT project maintains that, from a technological perspective, there is the need to re-think the security paradigm, delegating part of the security management to the system that needs to autonomously adapt to the changing environment, while remaining under our supervision. When designing or engineering these properties into the devices themselves is not possible, we must be able to resort to other kinds of capabilities, such as the ones deriving from legislation, or from other regulatory and governance instruments.

Job Description 
INTERSECT holds that when building security-by-design, security-by-default, robustness, and resilience into IoT devices themselves is not possible, we must also have legal, regulatory, and governance capabilities to address or prevent potential threats. In the last years, the EU has adopted a number of legislative instruments to regulate the collection and use of data. These instruments combine different policy objectives, from the protection of the personal data of individuals (the General Data Protection Regulation) to the promotion of the exchange and reuse of data (Data Governance Act, Data Act, and the future European data spaces). The increasingly complex and piecemeal EU regulatory framework applicable to data raises questions about its overall coherence and its ability to effectively regulate the collection and use of data, both from the perspective of the substance of the rules as well as the mechanisms of enforcement. For instance, how to balance privacy interests of individuals versus collective and societal interests in competition and innovation? Can any overarching principles be established regarding liability for the collection and use of data, and would such principles need to be sector-specific or are they valid across the economy? And how can data protection and competition authorities within and across EU Member States collaborate to enforce the applicable rules relating to data? 

You have the freedom to select and develop your own topic within the area of EU data liability. As part of your application, you are expected to submit a research statement describing the topic of your choice and explaining how it fits into the background sketched above. A requirement is to combine a data protection and economic law perspective.

The PhD project will be supervised by prof. Eleni Kosta and dr. Inge Graef.

What do we ask? 
Tilburg University is curious about how you can contribute to our research, education, impact, and to the team you will be part of. Therefore, we would like to get the best possible picture of your knowledge, insight, skills, and personality. Below you can find the qualifications we consider important for the position.

The candidate:

• holds a bachelor degree in law;
• has completed a master’s degree in law and has a good understanding of the regulation of data in the EU (including for instance, the GDPR, the Data Governance Act, or the Data Act);
• has an interest in questions regarding liability for the collection and use of data and the regulation of the data-driven society from a data protection and economic law perspective;
• has an excellent written and spoken command of English;
• has interest in working in an interdisciplinary environment, and wants to contribute to the broader TILT and INTERSECT communities; 
• has interest in teaching and supervising students at Bachelor and Master level (e.g., tutorial groups, thesis supervision).

To maintain a vibrant and active university community, it is important that we meet each other regularly and that the connection between us remains good. Therefore, the premise is that all staff members carry out their work in the Netherlands and that education tasks are carried out physically.

What do we offer?
Tilburg University offers excellent terms of employment with attention to flexibility and room for (personal) development. We recognize and reward our employees and encourage the use of talents and strengths.

Tilburg University is committed to an open and inclusive culture, embracing diversity, and encouraging the mutual integration of groups of staff and students. We create equal opportunities for all our staff and students so that everyone feels at home in our university community. 

We work in a vibrant and lively (work) environment on our beautiful campus, close to the forest and easily accessible by public transport. We are committed to a sustainable society and challenge you to make an active contribution to this. 

For this position, we offer:

• A position based on 0.8-1.0 FTE (32-40 hours per week);
• It is a vacancy for 4 years. You will initially be appointed for a fixed period of 16 months with a statutory probationary period of two months. After 12 months, an evaluation will take place. If the performance evaluation is positive, your employment agreement will be extended for the remaining period of 32 months;
• A great opportunity to gain experience in research as well as in teaching because we like to see you spend about 80% of your time on research and 20% of your time in education tasks;
• A salary of €2.770 gross per month for full time employment, based on UFO profile Promovendus and salary scale P of the Collective Labour Agreement for Dutch Universities. Your salary will increase annually (for a maximum of 4 years);
• Vacation allowance (8%) and a year-end bonus (8.3%);
• Vacation days (41 days for a 40-hour work week);
• Options Model for benefits and reimbursement of moving expenses;
• Employees from outside the Netherlands may be eligible for a tax-free allowance of 30% of their taxable wages. We will apply for this reimbursement for you;
• You will be enrolled in the General Pension Fund for Public Employers (ABP) through us;
• Various training courses, for example in leadership skills, personal effectiveness, and career development;
• A wide range of amenities and facilities and various arrangements to create an optimal work-life balance.

Visit working at Tilburg University for more information on our terms of employment. 

Tilburg University's motto is Understanding Society. Based on this vision, our more than 1,500 employees conduct research, inspire more than 19,000 students of 110 nationalities, and bring people from different disciplines and organizations together to learn from each other. In this way, we want to contribute to solving complex social issues. In doing so, we work from the fields of economics, business and entrepreneurship, social and behavioral sciences, law and public administration, humanities and digital sciences, and theology. We seek the connection between the various disciplines to find solutions to the major issues we face as a society. Our students are educated to become responsible and entrepreneurial thinkers, driven by solidarity, a sense of responsibility, and empathy, who are able to influence and give direction to a rapidly changing society in an innovative way. Tilburg University has a culture of collaboration and co-creation, at local, regional, national, and international level.

Since its founding in 1963, Tilburg Law School has become one of the leading law schools in Europe. Through top research and the provision of high-quality university education, the School contributes to society. Tilburg Law School is organized into five Departments: Public Law and Governance; Law, Technology, Markets and Society; Private, Business and Labour Law; the Fiscal Institute Tilburg; and Criminal Law. The mission of the School is to understand and improve the role of law and public administration in addressing the social problems of today and tomorrow. Through research and education, our scholars contribute to that mission. 

More than 4,000 students pursue a Bachelor's, pre-Master's or Master's degree at Tilburg Law School. Through this education, we train students in law, public administration, and data science. The Tilburg Educational Profile (TEP) is unique in the Netherlands. Central to it are three core concepts: knowledge, skill and character. A university education provides students with the latest substantive knowledge and trains them to be critical thinkers and resilient professionals. In addition, the School is committed to innovative educational concepts and, partly in response to the coronavirus crisis, has invested heavily in the quality of online education and in innovative didactic tools to make and keep students inquisitive. 

Tilburg Law School's research is highly regarded nationally and internationally. The Tilburg Law School Departments work closely together in their research in four signature research programs: 1) Global Law and Governance; 2) Law and Security; 3) Connecting Organizations; and 4) Regulating Socio-Technical Change. 

The Department Tilburg Institute for Law, Technology, and Society (TILT) is home to education and research on the effects of socio-technical change on the regulation and governance of economic activities in an era where information technology is a key driver of innovation. TILT is one of the leading research groups in Europe at the intersection of law, technology, and society. It is premised on the multidisciplinary study of socio-technical change, aiming at understanding the interaction of technology and social and normative practices in order to clarify how regulatory challenges of socio-technical change can be addressed.