The EU should create the legal framework for a single European contact-tracing infrastructure.