Constituent question: SAFE for Kids Act after the IDScan.net breach

I'm a New Yorker writing about the SAFE for Kids Act, and I'm asking you to work toward its repeal — or at minimum, a fundamental reworking of how it handles age verification. Last week's IDScan.net breach shows exactly why. A dark-web marketplace called Nexus started advertising 153 million scans of driver's licenses, along with more than 10 million other identity cards, travel documents, and medical cards. The data traces back to a single Louisiana verification company, one used at over 20,000 locations nationwide. Brian Krebs confirmed his own license was in the dump. So was the Defense Secretary's. The FBI opened an investigation on September 1. This is the industry New York law now forces websites to rely on. Under the SAFE for Kids Act, any site hosting content a minor might see has to verify ages before granting access — and the practical way to do that at scale is exactly the kind of third-party database that just got emptied onto the dark web. Every New Yorker who verifies their age under this law becomes a new record in someone else's honeypot. And once a license scan leaks, it leaks permanently — feeding identity theft and, perversely, giving kids better fake IDs than ever. I don't doubt the law's supporters care about children. But we can protect minors online without building a statewide queue of identity documents held by private contractors we can't secure. Parental controls, device-level defaults, and privacy-preserving approaches don't require collecting anyone's license photo. Albany passed this law with good intentions. The breach is evidence of where those intentions lead. Please reconsider it — and if full repeal isn't on the table, tell me what you'll support to ensure no New Yorker's ID ends up for sale on Exploit because the state demanded it be collected in the first place. I'd genuinely appreciate a substantive reply.