I'd be surprised if the law requires much beyond a vague best effort from service providers, but many already block connections from known server hosts and some even VPNs.
An airtight block is not what's required; stopping social media being mainstream for kids is.