The bill says that commercial entities serving pornography are required to do age verification through either verifying a driver’s license, verifying another piece of government-issued identification, or through the use of any commercially viable age verification mechanism.

So, yeah, I’d imagine compliance to look like either uploading a photograph or scan of an identity card or document for the site operators to check, or uploading it to an affiliated service which does age verification on their behalf.

Which is obviously horrendous from a privacy and information security standpoint for the consumer, and exposes the site operator to costs and legal risk associated with verifying and storing sensitive personal information.