US Senators Maria Cantwell, Bill Cassidy, and Amy Klobuchar introduced a bipartisan legislation to protect user privacy from exposure notification apps, also known as contact tracing apps. The Exposure Notification Privacy Act, outlines requirements for such apps to be on a voluntary-basis; provide consumers controls over their personal data; limit the scope of data collection and utilisation; and involve public health officials in the deployment process. The legislation also requires that exposure notification apps have safeguarding mechanisms to ensure data security.