A Google search states:
Under state law, the process to verify a student's sex for sports participation involves the following steps: [1, 2]
Review Official Documentation: The institution relies on the sex stated on the student's official birth certificate filed at or near the time of birth.
Resolve Disputes with Medical Exams: If a student's biological sex is disputed, the college must request that the student provide a signed statement or health examination from their personal health care provider.
Routine Verification: As part of the sports physical examination, a doctor verifies the student's biological sex by reviewing their reproductive anatomy, genetic makeup, or normal endogenously produced testosterone levels.
I wonder if the University of Miami followed the law (the required verification process), and what is the punishment if they didn't.