this looks like law created for age or identity verification providers (persona etc). No one would build it from scratch. It will be passed to these providers.