Need a law that says that if a company enables age verification, and leak someone's PII, then that company has to pay for all of each affected individual's hardships for the rest of their life due to the company leak.

Maybe even backwards compatibility as well. If a company requires age verification, then they must fund individuals to obtain individual identification since it's not free for people or tax payers.