What's crazy to me is that these laws will always arrive at this result because, at least the warehouses I've worked at, wouldn't want to take on the risk or spend the time to verify all this sensitive user data for such a small subset of users.
Then the users just use a VPN. Nicely done lawmakers, you've accomplished nothing.