Maryland 2025 Law: B2B Attribution Shifts

Maryland’s new employer meeting ban, which goes live on October 1, 2025, is about to complicate how we talk to employees about political or religious topics, and that means precise attribution in B2B marketing just became a much bigger deal. If you want to get a handle on this law’s impact on your internal memos and external campaigns, you need a solid plan for tracking and reporting performance. So how do we, as marketers, adjust our attribution models to stay on the right side of these new rules?

Setting Up Enhanced Attribution in Google Analytics 4 (GA4) for Regulatory Compliance

The new Maryland law, specifically Labor and Employment Article, Section 3-713, says you can’t force employees into meetings about the company’s take on politics or religion. For B2B marketers, particularly if you have staff or customers in Maryland, this changes how you have to track everything from internal newsletters to public campaigns that might even brush against these subjects. I tell my clients to work on the assumption that any communication could end up under a microscope which means your attribution needs to be crystal clear and easy to defend. Your old last-click model won’t cut it. You have to see the entire journey.

Step 1: Configure Custom Channel Groupings in GA4

First things first, get into your Google Analytics 4 property. Head over to Admin down in the bottom-left, and then under the “Data Display” section, hit Channel Groups. You’ll see the defaults, but what you want to do is click Create new channel group. This is how you’re going to teach GA4 to categorize your traffic in a way that helps with compliance, specifically by separating direct from indirect engagement. For example, you should create a custom channel you name something like “Direct Employee Communications” to track your internal-only stuff that’s strictly business. You can then build a rule for it using UTMs or referral sources, like if the source is exactly “internal.yourcompany.com”, it gets bucketed there. This kind of detailed control is what lets you isolate and analyze the channels that could get you into trouble with this Maryland law.

Step 2: Implement Strong UTM Tagging for All Campaigns

Your UTM parameters are absolutely essential for attribution, especially when you’re trying to navigate a new law like this. You have to tag every single link in every campaign, internal and external, without exception. I’m talking about your email newsletters, social posts, paid ads, and even links in internal docs if they point to a webpage you can track. For example, a link in an email about a new product feature needs tags like this:

• utm_source=email_newsletter
• utm_medium=email
• utm_campaign=product_launch_q3_2026
• utm_content=feature_overview

This isn’t just about knowing someone came from email. It’s about knowing they came from the Q3 2026 product launch campaign’s “feature overview” link. When an employee in Maryland clicks on something, these tags become your record of the communication’s purpose and how it was sent. I’m constantly telling people: if it’s not tagged, it basically didn’t happen in your data, and that’s a massive blind spot to have when regulators might come knocking.

Step 3: Establish Event Tracking for Key Interactions

Page views aren’t enough. You need to track what people are actually doing. In GA4, you do this by setting up custom events. The path is Admin > Data Streams > Web > Configure tag settings > Create custom events. Instead of just seeing that someone landed on a page, you can track specific actions like “webinar_registration,” “webinar_completion,” or “whitepaper_download.” For employers in Maryland, this gets really specific: tracking an event like “policy_acknowledgment_form_submit” is how you prove an employee actively engaged with required info, rather than being forced. These events tell a much richer story about the user’s journey than a simple page view count. You can take this a step further by creating custom dimensions from these events, maybe an “Engagement Type” dimension that sorts events into buckets like “Informational,” “Product-focused,” or “Compliance-related.” This gives you a quick way to scan your data and spot any content that someone could claim is pushing a viewpoint, which is exactly the kind of thing that could cause trouble under this new law.

Implementing a Multi-Touch Attribution Model

The new Maryland law basically makes last-click attribution obsolete if you want to stay compliant. You absolutely have to use a model that sees and credits every single touchpoint a person has with your company, which is something you should be doing anyway in B2B where sales cycles are long and messy. The whole point is to get a clear picture of how different channels work together, so you’re not putting too much weight on one single interaction that could fall under these new communication rules.

Step 1: Choose an Appropriate Attribution Model in GA4

Jump into GA4 and go to Admin > Attribution Settings to see your options. The default is data-driven, and honestly, that’s probably your best bet. You could also use position-based or time decay models for certain reports, but what’s important for compliance is that your model sees those early touchpoints. Think about it: an employee gets an internal announcement email (direct channel) then later finds that same resource through the company intranet (indirect). A data-driven or position-based model gives credit to both, which gives you a full picture of their journey and helps you understand influence. Data-driven is the strongest choice because it uses your own data to assign credit instead of just following fixed rules. It adjusts as people’s behavior changes, giving you a much smarter look at how your channels are performing, which is exactly what you need when you’re trying to figure out the effect of different content on employees when some of it could be legally sensitive.

Step 2: Analyze Path Reports and Model Comparison

In GA4, you’ll want to live in the Advertising > Attribution > Path reports. This is where you see the exact sequence of touchpoints that lead to a conversion. You’re looking for common patterns. Do people see an internal announcement and then later search the company blog? Knowing these paths lets you fine-tune your content and distribution to meet your goals while staying compliant. While you’re in there, use the Model comparison tool to see how different models spread credit around, which is a great way to spot channels that a last-click model would completely miss. You might discover that something like an internal town hall, which is now a risky channel in Maryland if it covers politics or religion, was actually a huge driver for journeys that converted later through other channels. That’s the kind of information that tells you where to shift your budget to communication methods that are both effective and legally sound. This is all about being smart with your communication.

Auditing Marketing Automation and Employee Communication Workflows

This Maryland law also applies to your internal communications, anything that could be interpreted as a mandatory meeting or message about politics or religion. You have to go through and audit all your automated workflows and comms channels. I can’t tell you how many companies I’ve seen get in trouble because of some old, forgotten email sequence or an internal chat system that nobody’s reviewed for compliance in five years.

Step 1: Review Automated Email Sequences and Internal Newsletters

Get into your marketing automation tool, whether it’s HubSpot, Salesforce Marketing Cloud, or something else, and pull up your “Automation” or “Journeys.” You need to read through every single automated email, especially any that go to your own employees or contacts in Maryland. Hunt for any language that sounds like a political opinion, a religious message, or anything that implies people *have* to engage with it. Check your CTAs, if you have an email telling employees to “learn more about our stance on [political issue]” that links to a mandatory meeting, you’re looking at a textbook violation. You have to change that content to be purely informational. So, instead of writing “Join us to discuss the company’s position on the upcoming election,” you change it to “Information session on new state regulations affecting our industry.” That small change in wording is a huge deal legally. The point is to make sure your communications comply with the law, which exists to protect employees from being forced to listen to this stuff.

Step 2: Evaluate Internal Collaboration Platforms and Intranet Content

Don’t forget to check your internal platforms like Slack, Microsoft Teams, and the company intranet. Go through the public channels, the big announcements, any content that’s pinned or featured. Do you have any “mandatory read” posts that get into political or religious views? What about your employee resource groups (ERGs)? They’re great, but could some of their content be mistaken for company-endorsed messaging on these topics? You need to make sure it’s obvious that joining these groups or reading the content is 100% voluntary. You should probably add disclaimers in those spaces saying that the opinions are from individual employees, not the company. Taking these steps ahead of time can reduce your risk. The biggest mistake you can make is thinking that just because a platform is “internal,” it’s safe from legal review. With a law like this, that’s a dangerous assumption.

Using Customer Data Platforms (CDPs) for Well-rounded Attribution

A Customer Data Platform (CDP) is designed to pull all your customer interaction data from everywhere into one single profile for each person. This is a huge advantage for attribution, especially now that some of your direct communication channels are about to get more complicated. When you have one place to see all the data, you can build attribution models that are both more accurate and compliant. For instance, using a tool like Segment lets you pull in behavioral data from your site, transaction data from your sales system, and demographic data from your CRM to get a complete timeline of the customer’s path.

Step 1: Integrate All Data Sources into Your CDP

You need to connect everything to your CDP: your CRM, marketing automation, GA4, ad platforms, even internal tools if possible. The idea is to capture every single touchpoint. A perfect example is a prospect in Maryland who attends a virtual conference you sponsor (which you track in your event software), then visits your site, downloads a whitepaper, and finally becomes a lead after a sales call. A CDP takes all those separate events and ties them to one person’s profile. When you run attribution analysis, you’re looking at that person’s entire history with your brand, not just a siloed report from one campaign. This gives you a way smarter understanding of which channels actually lead to conversions and helps you see how your communications line up with the new legal rules.

Step 2: Build Custom Attribution Reports in Your CDP

Once the data is in your CDP, you can build custom attribution reports that are way more powerful than what you can get from GA4 alone because they can include data from sales calls, support tickets, and offline events. You can even set up your own attribution rules based on the Maryland law. For instance, you could write a rule to automatically lower the credit given to any direct employee communication that happened right before a sensitive event, just to be safe. This kind of custom setup lets you build an attribution model that’s both great for optimizing your marketing spend and completely defensible from a legal perspective. You’ll have clear, data-driven proof of how people are interacting with your brand, which is exactly what you need to show you’re complying with Maryland’s new ban. This is just good, proactive risk management.

When Maryland’s employer meeting ban kicks in during October 2025, it will force B2B marketers to get serious about their attribution, focusing on transparency and detailed data collection. If you use the advanced GA4 setups, disciplined UTM tagging, and a CDP as we’ve discussed, you can handle these new rules and keep your communications both effective and compliant. In this new environment, tracking every touchpoint with precision has become a legal requirement.