On July 10, the European Commission issued its Commission Implementing Decision (adequacy decision) to permit the transfer of personal data from the European economic area (i.e., the 27 EU member states, plus Norway, Iceland and Liechtenstein) (EEA) to the United States under the new EU-US data privacy framework (DPF). One week later, the U.S. Department of Commerce launched its DPF program website (www.dataprivacyframework.gov) to permit U.S. companies to certify under the program. Here are five things to know.