The alternatives I saw in the Dutch news article were face or fingerprint recognition which is even worse. In general they're leaving it to Facebook to figure out how to comply, and they will be more than happy to absorb as much user data as possible - now that have a legal basis as an excuse.
Discussion
It's a very similar dynamic to #chatcontrol: regulators using fancy language to pretend it's not a massive privacy invasion, but maybe there's some fancy alternative. But they leave the implementation to the private sector, only fine companies if they don't comply and look the other way if privacy doesn't work out.