Craig Hilsmith

Legal Director, Commercial
Edinburgh, UK

Expertise

Craig is a Legal Director in the Commercial and Data team, with over 15 years’ experience advising clients on technology supply contracts, outsourcing arrangements and data protection compliance. Craig has particular expertise in drafting and negotiating SaaS agreements and material outsourcing agreements, advising on complex data protection issues (including international data transfers under UK and EU law) and increasingly, working on AI related provisions and contracts. Craig has worked primarily in regulated sectors, having recently spent 8 years ‘in-house’ in Financial Services. He has substantial experience working the Energy sector whilst in private practice, including a secondment to a major energy firm earlier in his career.

Experience

Advising a major high street bank on its contractual terms with its clients in relation to a data-as-a-service range of products, including with respect to AI and data protection compliance.
Advising on the data and information aspects of a complex long-term infrastructure/project agreement, including drafting and risk allocation relating to data provision, access, sharing, transparency, confidentiality, security-related information, audit and regulatory information rights, and operational data and reporting requirements.
Advising a major UK supermarket on the data protection aspects of a strategic technology services arrangement for AI-powered retail inventory monitoring, to structure a compliant framework for the use of in-store image data and related personal data within a complex master services agreement and statements of work.