This would theoretically prevent Apple, Google and government agencies from collecting more data than they should, or funnelling it into the hands of marketers and others who might abuse it.

However, privacy advocates are concerned it doesn’t do enough and might even worsen consumer safeguards. Public Knowledge Policy Counsel Sara Collins claimed that the bill only covers contact tracing data, not other health or location info, and could still let companies determine who was infected. The bill also “gratuitously preempts” the FCC’s stronger privacy measures for carriers, Collins said, and doesn’t give the FTC the resources or authority to take action. On top of this, the bill could force states to adopt federal rules even if they want to implement stronger approaches.

There’s no guarantee the Act will become law, at least as-is. Provided the Republican-backed bill passes in the Senate, a counterpart bill still has to go through the Democrat-led House. There could be significant disagreements over key points, especially if Democrats share Collins’ belief that it’s really a deregulatory measure in disguise. Nonetheless, this shows how the privacy implications of COVID-19 tracking apps have become hot issues no matter what your political leanings might be.