2019-01456 - Post-Doctoral Research Visit F/M Risk Analysis of Privacy Policies

Contract type : Public service fixed-term contract

Level of qualifications required : PhD or equivalent

Fonction : Post-Doctoral Research Visit

About the research centre or Inria department

Grenoble Rhône-Alpes Research Center groups together a few less than 800 people in 35 research teams and 9 research support departments.

Staff is localized on 5 campuses in Grenoble and Lyon, in close collaboration with labs, research and higher education institutions in Grenoble and Lyon, but also with the economic players in these areas.

Present in the fields of software, high-performance computing, Internet of things, image and data, but also simulation in oceanography and biology, it participates at the best level of international scientific achievements and collaborations in both Europe and the rest of the world.


Within the framework of a partnership (you can choose between) 

  • collaboration within the SPAI Inria Project-Lab



The postdoc project will be conducted in collaboration with the members of the Inria Privatics group and the other partners of the SPAI Inria Project Lab. It will be adapted in agreement with the successful candidate, based on his expertise and motivation.

Main activities

Transparency is important on the Internet but even more in the context of IoT (Internet of Things), which, by definition, measures and collects a large amount of personal data in a continuous manner. Transparency is a necessary condition to allow users to make informed choices about the disclosure of their personal data.However, transparency is not sufficient in itself.  The EU General Data Protection Regulation (GDPR) emphasises the fact that data subjects should be made aware of the risks related to personal data processing.

The approach followed in the SPAI Inria Project Lab consists in expressing information and consent through privacy policies (for data controllers and data subjects respectively). When they are endowed with a formal semantics, these policies can be analysed to provide information about the privacy risks taken by the user.

The goal of the postdoc project is to build on the privacy policy language defined in the Privatics group to propose a privacy risk analysis method. This risk analysis method could typically derive properties about the types of personal data that could (or could not) be used by certain stakeholders based on assumptions about potential attackers (or, more generally, misbehaving agents). The results of this analysis could be used by the data subject to enhance his understanding of the privacy policies and possibly adjust his own policy to reduce the risks.


The candidate should have a PhD in computer science or a related field. Knowledge and motivation for one of the following fields would be appreciated: privacy,  formal semantics,  human computer interaction.

Knowledge of French is not required.

Benefits package

  • Subsidized meals
  • Partial reimbursement of public transport costs
  • Leave: 7 weeks of annual leave + 10 extra days off due to RTT (statutory reduction in working hours) + possibility of exceptional leave (sick children, moving home, etc.)
  • Possibility of teleworking (after 6 months of employment) and flexible organization of working hours
  • Professional equipment available (videoconferencing, loan of computer equipment, etc.)
  • Social, cultural and sports events and activities
  • Access to vocational training
  • Social security coverage


Monthly income before taxes : 2 653€