How do you enforce this law without forcing vpn providers to log and monitor the traffic and report "offenders"?

What would be the unintended consequences?