Websites where over one-third of content is adult sexual material must verify users are 18 using digital ID, government ID, or trusted data checks. Sites and vendors cannot keep identifying info. They must post health warnings and a federal helpline. News outlets, ISPs, search engines, and cloud hosts are exempt. The attorney general can sue and fine up to $10,000 per day, $10,000 per data-retention incident, and up to $250,000 if minors gain access. Goal: reduce youth exposure.