I wasn’t looking to become a privacy researcher. I was just scrolling through my phone one evening, killing time before bed, when an ad appeared for a product I’d mentioned in a private conversation the day before. Not searched for. Not typed into any browser. Just spoken aloud in my kitchen while a friend was over. The ad was for a very specific brand of hiking boots — the exact ones my friend had recommended. My phone was sitting on the counter, seemingly asleep, but apparently not asleep enough. I felt a cold prickle on the back of my neck. Had my phone been listening? Was that even possible? And if it was, what else had it heard?
That moment of unease turned into a quiet obsession. I started reading about how apps collect data, how voice assistants process snippets of conversation, and how much information advertisers can infer from seemingly innocent bits of our digital exhaust. I learned about shadow profiles — the data companies build about people who don’t even use their services — and about the surveillance capitalism model that underpins the entire online economy. The more I learned, the more I felt like a character in a story I hadn’t agreed to participate in. My curiosity stopped being casual and became urgent. I wanted to understand the legal and ethical frameworks that governed — or failed to govern — this invisible, all‑seeing architecture.
When it came time to choose a dissertation topic, I knew I wanted to dig into data privacy and surveillance, but the field was overwhelming. I could explore government mass surveillance, corporate data practices, facial recognition in public spaces, the right to be forgotten, or the ethics of predictive policing. Each direction felt both urgent and impossibly vast. I needed a map. I turned to a collection of data privacy & surveillance studies dissertation topics and spent an evening working through the possibilities. Some topics examined the legality of workplace monitoring under GDPR, others investigated how public attitudes toward privacy have shifted post‑pandemic, and a few explored the ethical dilemmas of using big data in refugee surveillance. That range helped me crystallise my own question: the effectiveness of consent‑based privacy frameworks in an era of passive voice data collection.
With my direction sharper, I began to design a legal and sociological study. I decided to compare the European GDPR and the California Consumer Privacy Act, focusing specifically on the regulations around voice data and inferred consent. My supervisor helped me ground the work in surveillance studies theory, and I started collecting case law, policy documents, and consumer surveys. For the first time, the dissertation felt less like an academic exercise and more like a personal investigation — a way to reclaim some agency in a world that felt increasingly transparent to everyone but me.
If you’ve ever felt that uneasy prickle of recognition when an ad seems to know too much, or wondered who really controls the data trails you leave behind every day, data privacy and surveillance studies might be the field for you. The best research questions often begin with a moment of discomfort — a question you can’t stop turning over in your mind. Then explore what other students have already investigated, and use that to shape your own curiosity into a project that matters. Because the systems that watch us are only growing more powerful, and the people who study them — and hold them accountable — are more necessary than ever.