If validation passes, true will be returned. Otherwise, a FormValidationException exception will be thrown. You can either catch that within your controller, or pass it to, for example, global.php for handling. Either works.
The key is that you'll create a dedicated class for each form that you need to validate. For instance, if a user can register for your site, then you'll have a Registration form object. Maybe something like: