That, and it's not even a bill yet, it's a proposal for a new regulation that won't go into effect for another 3 years after approval by the Council. To be clear, it's far from approval and these things are rarely approved unaltered. Also, this regulation doesn't even apply to individuals, but is aimed towards financial service companies.

But apparently the Sessions new motto is:

"trust, don't verify" 🤔