Victor Morel

Victor Morel

PhD in Computer Science / Postdoc Researcher

Chalmers University of Technology


Victor Morel holds a PhD in computer science from Inria - Privatics. His research interests include privacy and data protection, networks security, usability and Human-Computer Interactions, applied cryptography, and ethics of technology in a broad manner. He appreciates sober, hackable, and accessible technology that works.

He is currently working as a postdoctoral researcher in the Security & Privacy Lab at Chalmers University of Technology on usable privacy for IoT applications. He is also a selected member of the EDPB’s support pool of experts.

Besides his academic activities, he is a member of FELINN’s collegiate council, a French association (1901) defending decentralization, privacy, and free software through popular education.


  • Privacy
  • Data Protection
  • Networks
  • Usability
  • Applied Cryptography
  • Human-Computer Interactions
  • Ethics


  • Qualification MCF Section 27, 2022

  • PhD in Computer Science, 2020

    INSA de Lyon - Inria

  • Master Thesis, 2016

    Uppsala University

  • Engineer Degree, 2016

    Polytech' Lyon

Recent Posts

Call for views on “consent or pay” business models

The UK DPA, ICO, recently called for views on “consent or pay” business models. Here is our feedback.

The reason behind Meta's last move

Meta just rolled a new way to address legal compliance in the EU: leave people with a choice to either subscribe or have their data collected. I have a pretty good idea as to why, and guess what: they’re not doing it out of good heart.

Master thesis proposals

Living page for my master thesis proposals.

Le droit pour les informaticien·nes

Mon compendium francophone du livre Law for Computer Scientists (and other folks) de Mireille Hildebrandt

Resources for Students

You can find here a set of resources that can help you write academic English, make the most of what you read and how to look for reads, as well as tips for presenting your work.

Recent Publications

Quickly discover relevant content by filtering publications.

Legitimate Interest is the New Consent – Large-Scale Measurement and Legal Compliance of IAB Europe TCF Paywalls

Cookie paywalls allow visitors of a website to access its content only after they make a choice between paying a fee or accept …

Putting a Padlock on Lambda – Integrating vTPMs into AWS Firecracker

When software services use cloud providers to run their workloads, they place implicit trust in the cloud provider, without an explicit …

Tapping into Privacy: A Study of User Preferences and Concerns on Trigger-Action Platforms

The Internet of Things (IoT) devices are rapidly increasing in popularity, with more individuals using Internet-connected devices that …

Automating privacy decisions – where to draw the line?

Users are often overwhelmed by privacy decisions to manage their personal data, which can happen on the web, in mobile, and in IoT …

Your Consent Is Worth 75 Euros A Year - Measurement and Lawfulness of Cookie Paywalls

Most websites offer their content for free, though this gratuity often comes with a counterpart: personal data is collected to finance …



CoIoT is a project to manage consent in the IoT. It takes the form of an Android app enabling the definition of data subject privacy policies to automatically interact with IoT devices according to the user’s choices.


CyberSecIT will develop a practical, secure and privacy-enhancing solution regaining control for end-users and companies over their IoT ecosystems while enjoying all the benefits that come from automated data analysis and autonomous privacy-preserving security monitoring.

Map of Things

Map of Things is a map to visualize devices in the smart city collecting personal data, please mail me for comments or feature request.

Talks & Press

Of cookies and paywalls

Invited talk to the Citi lab.

Of cookies and paywalls

Invited talk to the Privaski seminar in the Alps.

Cristiana Santos and Victor Morel: The problem with CMPs and TCF-based cookie paywalls

What is wrong with “consent walls” in the news media? What role do CMPs have in the deceiving practices of their customers? Who …

``Automated Privacy Decisions: Usability vs. Lawfulness'' with Simone Fischer-Hübner & Victor Morel

Today, Debra welcomes Victor Morel, PhD and Simone Fischer-Hübner, PhD to discuss their recent paper, “Automating Privacy …

Meet the WASP Postdocs

Short internal interview by WASP about my postdoc.

Teaching & Duties

Program Committee Member and session chair IFIP Summer school 2023.

Program Committee Member IWPE 2023.

Program Committee Member PoPETS 2023-2024.

External Reviewer PoPETS 2021-2022.

I also do external reviews for venues such as WWW, ESORICS, ETHICOMP, etc.

At Chalmers, I teach:

  • cryptography (TA and guest lecturer)
  • advanced programming in python (TA and lecturer)

I also supervise master theses, 3 successful defenses so far!

At UGA (2020), I taught a full-time duty in Databases (fr and en).

At Insa de Lyon (2016-2019), I have taught:

  • Genetic Algorithms and Project Management (fr),
  • Computer basics: Networks and Security (fr),
  • Algorithmic and Programming 4 (fr & en).

At Uppsala University (2016), I was a teacher assistant in Database Design I (en).