Meta ordered to pay $25billion in New Mexico Facebook privacy case

In this story
Jump to Timeline

Key Reporting

A New Mexico judge has ordered Meta Platforms to pay $25billion after a jury found that the company misled consumers about Facebook’s data privacy practices and its handling of harmful content, delivering a major financial penalty in a case rooted in the Cambridge Analytica scandal.

The October 21 ruling by Judge Francis Mathew followed a September jury verdict finding more than 43 million violations of the state’s consumer protection laws. Meta disputes the decision and says it intends to appeal.

Facebook’s wrongdoing — over the course of years and systematically broadcast to the public — goes to the heart of Facebook’s core business practices.

Judge Mathew wrote in his order.

What the jury found

The case concerned what Facebook told the public about who could access users’ information, how it enforced policies on hate speech and misinformation, and whether its public assurances reflected its internal practices.

On September 25, jurors found that 26 of 29 statements made by the company and its leadership were misleading. The violations were counted according to the number of Facebook users or New Mexico residents who formed the audience for each misleading statement—not as 43 million separate statements or individual data breaches.

Mathew described the company’s conduct as “willful” and said the misrepresentations extended from 2010 to 2021. His order also said communications involving senior executives, including Mark Zuckerberg, were designed to mislead the public, according to the BBC.

New Mexico argued that Meta knew third parties had broad access to personal information and tolerated hate speech or other harmful content when doing so benefited its business. Meta rejected the allegations, arguing in court filings that it does not sell user data and that the state had not proved any consumer was actually misled.

How Cambridge Analytica led to the lawsuit

New Mexico filed the lawsuit in 2021, following revelations that political consulting firm Cambridge Analytica had obtained personal information from as many as 87 million Facebook users through a third-party application.

The now-defunct firm, which worked for Donald Trump’s successful 2016 presidential campaign, obtained the information from a researcher who had been permitted to deploy an app on Facebook. The data was acquired without users’ consent for voter profiling and targeting.

The lawsuit reached beyond that episode. It challenged years of public statements about Facebook’s privacy protections and content policies, making the central issue whether the company accurately described how its platform operated—not simply whether a single outside firm had misused information.

Why the penalty reached $25billion

New Mexico law allows civil penalties of up to $5,000 per violation. Applied to the jury’s findings, Mathew determined that a penalty exceeding $219billion was warranted under state law, but reduced the award to $25 billion.

The final amount was also below the $35billion to $40billion requested by the state’s lawyers at an October 1 hearing. Meta had urged the judge to cap the penalty at $3.45billion, arguing that a larger award risked violating constitutional protections involving due process and excessive fines.

The award is five times the $5billion penalty imposed on Facebook by the Federal Trade Commission in 2019 over privacy practices connected to the Cambridge Analytica scandal. Reuters described the New Mexico penalty as the largest imposed on Meta in the scandal’s aftermath.

Attorney General Raúl Torrez said state law directs the penalty money to New Mexico’s school system. That makes the award a civil enforcement penalty intended for public education, rather than a compensation fund distributed directly to affected Facebook users.

Meta challenges the ruling

Meta’s chief legal officer, C.J. Mahoney, said the company was confident it would prevail on appeal and argued that the ruling made it “all but impossible to do business in the state of New Mexico.”

At its core, this lawsuit seeks to impose a tax on speech to enforce new rules for what people can say online.

Mahoney said.

“At its core, this lawsuit seeks to impose a tax on speech to enforce new rules for what people can say online,” Mahoney said.

The company’s constitutional objections are likely to be central to the next stage of the dispute. Legal experts and financial analysts told Reuters that the penalty could face a lengthy appeals process. The $25billion is therefore a court-ordered award, not money the state has already collected.

A separate case over children’s safety

The privacy judgment is distinct from another New Mexico lawsuit against Meta concerning young users’ safety on Facebook, Instagram and WhatsApp. In that case, a Santa Fe jury ordered $375million in civil penalties in March. A subsequent ruling required another $567million for a teen mental health fund and measures to protect young Facebook and Instagram users in the state.

The October ruling adds a much larger financial judgment to that confrontation, while leaving its ultimate size subject to further litigation. For New Mexico, the case centres on holding a company accountable for the promises it makes to consumers; for Meta, the appeal will test whether the state’s enforcement and the scale of the penalty can withstand constitutional scrutiny.

youtube placeholder image
youtube placeholder image
youtube placeholder image
youtube placeholder image
Timeline

The legal journey leading to Meta’s historic $25billion civil penalty spans over a decade of data privacy disputes, stemming from actions dating back to 2010 and culminating in the landmark October 2026 judicial order.

2010–2011: Mark Zuckerberg publishes a high-profile op-ed in The Washington Post asserting that Facebook does not sell user data. Over the next decade, Meta platforms systematically broadcast public statements promising users complete control over their personal information—claims a state judge later rules were completely false.

2015–2016: The British political consulting firm Cambridge Analytica harvests personal profiles from up to 87 million global Facebook users without their explicit consent. The data is used to build voter profiles to generate targeted political ads during the 2016 U.S. presidential election.

2018: Whistleblowers reveal the massive scale of the Cambridge Analytica breach. The public discovers that Meta executives knew third parties retained broad access to user data but largely tolerated the infractions because the data loop supported the company’s financial bottom line.

2021: The New Mexico Department of Justice officially files a lawsuit against Meta. The state accuses the tech giant of lying to residents about data access, failing to investigate the breach as promised, and misrepresenting its handling of hate speech and misinformation.

Sep 8, 2026: After years of legal maneuvering and motions, the data privacy civil trial officially opens in the State District Court in Santa Fe, New Mexico.

Sep 25, 2026: Following a two-week trial, a Santa Fe County jury finds Meta liable for violating the state’s Unfair Practices Act. The jury determines that Meta committed 43.8 million individual violations against state consumers, concluding that 26 out of 29 public statements made by corporate leadership were intentionally misleading.

Oct 1, 2026: New Mexico prosecutors formally ask the court to fine Meta between $35 billion and $40 billion based on statutory consumer protection guidelines. Meta files counter-motions asking the judge to cap the fine at $3.45 billion.

Oct 21, 2026: State District Judge Francis Mathew issues the final landmark order. While noting that statutory guidelines mathematically warranted a massive $219.5 billion penalty, he reduces the final judgment to $25 billion to roughly match one quarter of Meta’s global profits.

Future Outlook (Post-Oct 2026): Meta’s Chief Legal Officer immediately announces plans to appeal the ruling to the U.S. Court of Appeals, calling the multi-billion dollar verdict “all but impossible to do business in the state”. The funds will remain frozen in the appellate pipeline until a higher court delivers a final verdict.

You may also be interested in

LEAVE A REPLY

Please enter your comment!
Please enter your name here