In July 2023, the Commission adopted an adequacy decision for the EU-US Data Privacy Framework, on the basis of which personal data can flow freely from the EU to participating companies in the US. The decision (in line with the GDPR) foresees a periodic review, the first of which is to take place within one year to assess whether all elements of the Framework are in place and functioning as intended. This report by the Commission will present the findings and conclusions of the first review.