The flaw in the system is that it requires the priest to know the identity of the penitent - not just to be able to see their face but, in order to make a report of any value, actually know their name and contact information. Obviously, if it’s someone I know personally (like another priest) then that’s easy enough - although even then, I don’t have contact details for all of my parishioners. Of course, the whole requirement to report falls down if there’s nothing meaningful that can be reported because the priest didn’t know the penitent. It’s all well and good for someone - even another priest - to say that they confessed to me but if I don’t know them from Adam then there’s nothing for me to report. The law doesn’t require priests to ask for the name of the person confessing to them (nor would I) . Besides this, a lot also depends on what’s actually said - if a person confesses to committing “impure acts with another” a priest isn’t going to be asking then to delve into the details. At most they may ask the person if they’re married but that’s it. While a priest should disclose his status to a confessor, strictly speaking his doesn’t have to and, absent personal knowledge, the confessor will be none the wiser. So all a pedophile has to do is go to a priest who doesn’t know him - easy enough in a large diocese or one with other dioceses nearby.
Ultimately, this is just a law intended to make politicians look good but which in reality is practically useless.