Surely this would affect all online prescribers and third party certification companies, who have been using government ID card verification for years.

I don't think biometric data is necessary at all here.