New AI laws in Colorado and Connecticut have added to the patchwork of decision-making tool regulations across the U.S. Covered companies need to prepare now to adjust their compliance programs and procedures to address the laws’ requirements, which impact operators of certain automated decision-making technology and AI decision-making tools, AI companions, frontier developers and producers of synthetic content. This second article in a two-part series, with insights from Ballard Spahr, DLA Piper, Fisher Phillips, Holland & Knight and the senator who sponsored the Connecticut law, provides compliance tips for companies seeking to prepare for the new laws and examines what anticipated enforcement may look like. Part one distilled and analyzed the laws’ key provisions. See “Updating Compliance Programs to Address the CPPA’s Regulations on ADMT and Risk Assessments” (Sep. 17, 2025).