Congress passes a law that requires all persons to download and sign up for a free contract tracing application ("app") or pay a penalty of $2,000.The penalty is administered through the IRS.

The law also requires individuals who test positive for COVID-19 to notify the government of their positive test via the app, so that the government may institute contact tracing and notify other affected individuals. Failure to do so is a misdemeanor criminal offense punished by a fine of $500.

Question:

Under what authority, if any, can Congress pass the law?