Privacy & AI Engineer · SURF, Netherlands
Julian C. Rill
I am a Privacy & AI Engineer working at the intersection of applied AI, Privacy Enhancing Technologies (PETs), and European data protection. At SURF, I assess the technical privacy and security of services used by Dutch education and research institutions, translating requirements such as the GDPR and EU AI Act into evidence and practical controls.
My work combines hands-on engineering with technical assessment. I built P-VERITAS, an open-source system that analyzes network traffic and service documentation to help investigators find personal data flows, tracking behaviour, and privacy risks. I’m completing an MSc in Cognitive Science at Universität Osnabrück, specialising in AI.
Earlier, I studied Applied Computer Science at Windesheim (cum laude), researched anonymization for the G-LocON project at Shibaura Institute of Technology in Tokyo, and worked in identity and access management at Univé. I’m a Certified Information Privacy Technologist (CIPT).
My interests include privacy engineering, AI assurance, network measurement, and building systems that make trustworthy technology easier to put into practice.
Data Protection & Privacy Technologist
Utrecht, Netherlands
Selected work
P-VERITAS: Privacy Verification and Traffic Analysis System
An open-source, AI-assisted workflow for turning network traffic and service documentation into structured evidence for technical privacy assessments.
Data Protection Impact AssessmentData Protection Impact Assessment on Nextcloud
Technical lead for a GDPR assessment of Nextcloud Enterprise as a sovereign collaboration platform for education and research.
Privacy ResearchPrivacy and anonymization for G-LocON
Bachelor’s thesis research on anonymising location data and improving GDPR compliance in a peer-to-peer mobility framework.