Depends entirely on how it’s implemented, because the website doesn’t need to know who you are, only verify that you are over 18. Which can be done reasonably securely - you generate a random ID on a secure service, give that ID to the website, and the only communication between the two of them is “Is id 123 valid and an adult? Yes/No”.
Now, if that “secure service”, most likely a government contract done as cheaply as possible turns out not to be, and they keep logs linking those IDs to the URLs requesting verification, then the entire thing goes belly up.
echodot@feddit.uk 5 hours ago
I’m sure the most rigorous of data safety standards will be followed. After all they’re being forced to do this I’m sure they won’t take the cheapest possible route. Oh definitely not.