It's very unclear to me who, exactly, is going to be able to determine that significant numbers of children are accessing my website if I'm not tracking any sort of analytics beyond hits/day. Even taking into account section (D), it's hard to imagine the California AG, even if acting in bad faith, is going to be able to find a blog that is "substantially similar" to mine which has analytics data pointing to traffic showing those sorts of demographics.

Also, to be clear, I'm not trying to be pedantic or split hairs here, I'm trying to explain my own actual thought process in reading the law and considering my own risk/exposure. As I mentioned in a reply to a sibling comment, this law looks genuinely awful, but I'm not going to lose any sleep over the likelihood of getting sued by the state of California for a personal website where I mainly make a half-assed effort to write about the nerdiest shit possible (i.e. computer programming and board games that are best played with the aid of a spreadsheet).