The COVID-19 pandemic elicited a surge in the use of digital tools to replace “classic” manual disease tracking and contact tracing across individuals. The main technical reason is based on the disease surveillance needs imposed by the magnitude of the spread of the SARS-CoV-2 virus since 2020, particularly how these needs overwhelmed governments around the world. Such developments led to stark variations across countries in terms of legal approaches towards the use of digital tools, including self-reporting software and mobile phone apps, for both disease tracking and contact tracing. Against this backdrop, in this article I highlight some of the normative challenges posed by the digitalization of disease surveillance, underscoring its almost non-existent regulation under international law. I look back at the historical emergence of the epidemiological principles underlying this procedure, by referring to John Snow’s trailblazing work in cholera control. I emphasize how the COVID-19 pandemic prompted both technical and normative shifts related to the digitalization of these procedures. Furthermore, I refer to some of the overarching obstacles for deploying international law to tackle future tensions between the public health rationale for digitalized disease tracking and contact tracing, on the one hand, and normative concerns directly related to their legality, on the other hand. Lastly, I put forward conclusions in light of the current juncture of international health law reforms, and how they so far display limited potential to herald structural changes concerning the legality of the use of digital tools in disease surveillance.