Anonymous age verification.

(1) As used in this section, the term “anonymous age verification” means a commercially reasonable method used by a government agency or a business for the purpose of age verification which is conducted by a nongovernmental, independent third party organized under the laws of a state of the United States which:

(a) Has its principal place of business in a state of the United States; and

(b) Is not owned or controlled by a company formed in a foreign country, a government of a foreign country, or any other entity formed in a foreign country.

(2) A third party conducting anonymous age verification pursuant to this section:

(a) May not retain personal identifying information used to verify age once the age of an account holder or a person seeking an account has been verified.

(b) May not use personal identifying information used to verify age for any other purpose.

(c) Must keep anonymous any personal identifying information used to verify age. Such information may not be shared or otherwise communicated to any person.

(d) Must protect personal identifying information used to verify age from unauthorized or illegal access, destruction, use, modification, or disclosure through reasonable security procedures and practices appropriate to the nature of the personal information.