Once the website is designated as such, you're looked at with more scrutiny, have to comply to higher standards, and the exact remediation steps are decided on a case-by-case basis. All of the cases are chugging along, but not all of them are on the same stage.
If your website is not popular enough to be designated as VLOP, this law basically doesn't exist. It's not like GDPR in a sense that it defines some things everyone has to follow, regardless of your audience size.
Let's hope they don't chicken out.