Meta Platforms has been ordered to pay $25 billion to New Mexico after a judge ruled that the company should face a substantial financial penalty for misleading consumers about Facebook’s data privacy practices. The decision, issued on October 21, 2026, followed a jury verdict finding that Meta violated New Mexico’s consumer protection laws through misleading statements about user privacy and content moderation. The case is connected to the Cambridge Analytica scandal, which exposed how personal information from millions of Facebook users was obtained and used for political profiling.
The ruling represents a major legal setback for the owner of Facebook, Instagram and WhatsApp, although the company has said it intends to appeal. The judge calculated that the state’s maximum statutory penalties could have produced a figure exceeding $219 billion, but reduced the amount to $25 billion. The dispute highlights continuing questions about how technology companies collect, protect and communicate information about users, and whether existing consumer protection laws can impose substantial financial consequences when companies are found to have misled the public.
Key Takeaways
- $25 billion penalty: A New Mexico judge ordered Meta to pay the state following a jury verdict on consumer protection violations.
- Cambridge Analytica connection: The case followed allegations involving personal data collected from Facebook users through a third-party application.
- More than 43 million violations: Jurors found that Meta violated New Mexico consumer protection law more than 43 million times.
- Penalty reduced: The judge reduced a potential calculation of approximately $219.5 billion to $25 billion.
- Meta plans to appeal: The company disputes the ruling and argues that the penalty is excessive and legally flawed.
- Separate from the FTC case: Meta previously faced a $5 billion US Federal Trade Commission penalty in 2019 over privacy-related violations.
- Education funding: New Mexico says money from consumer protection penalties goes toward the state’s education system.
Why Was Meta Ordered to Pay $25 Billion?
The lawsuit was filed in 2021 by New Mexico Attorney General Raúl Torrez. The state alleged that Meta misled Facebook users about who could access their personal information, how the company handled privacy and how it addressed harmful content on its platform.
The legal action followed the revelations surrounding Cambridge Analytica, a British political consulting firm that obtained personal information from Facebook users through a third-party application. The data was reportedly used to build profiles for political advertising, including work associated with the 2016 US presidential election.
New Mexico argued that Meta’s public statements did not accurately reflect the risks associated with its data practices. The state also raised concerns about the company’s statements regarding misinformation, hate speech and content moderation.
A jury in Santa Fe found in September 2026 that 26 of 29 statements made by Meta and its leadership were misleading. Jurors determined that the company had committed more than 43 million violations of the state’s consumer protection laws.
The judge subsequently determined the financial penalty. The $25 billion order is based on New Mexico’s state-law claims and the jury’s findings, rather than being a new federal penalty imposed directly for the original Cambridge Analytica scandal.
How the $25 Billion Penalty Was Calculated
New Mexico law allows civil penalties of up to $5,000 per violation of its consumer protection law. The number of violations identified by the jury therefore became central to the financial calculation.
Based on the statutory maximum and the number of violations, the potential penalty exceeded $219 billion. Judge Francis Mathew ultimately reduced the award to $25 billion.
Key figures in the case
| Item | Details |
|---|---|
| Defendant | Meta Platforms |
| State bringing the case | New Mexico, United States |
| Lawsuit filed | 2021 |
| Jury verdict | September 2026 |
| Judge’s penalty order | October 21, 2026 |
| Violations identified | More than 43 million |
| Potential maximum calculation | Approximately $219.5 billion |
| Ordered penalty | $25 billion |
| Meta’s position | Plans to appeal |
| Intended destination of penalty funds | New Mexico’s education system |
The scale of the penalty reflects the way the state’s law calculates violations. Meta argued that the state’s approach produced an excessive amount because it counted violations based on the reach of the allegedly misleading statements rather than demonstrating that each affected person had individually suffered harm.
The judge’s decision establishes the penalty at the current stage of the proceedings, but it does not guarantee that Meta will ultimately pay the full amount. An appeal could change the amount or other aspects of the judgment.
What Was Cambridge Analytica and Why Does It Matter?
Cambridge Analytica became a global focus of attention in 2018 after reports revealed that the political consulting firm had obtained Facebook user data through an application developed by researcher Aleksandr Kogan.
The application collected information from people who used it and, under Facebook’s platform rules at the time, could also access information associated with some of their Facebook friends. Data from as many as 87 million users may have been affected.
Cambridge Analytica used personal information to develop voter profiles and support targeted political advertising. The disclosures raised questions about whether Facebook users understood how their information could be accessed and used by third parties.
The scandal prompted regulatory investigations, congressional scrutiny and changes to Facebook’s privacy practices. It also damaged public trust in the company’s handling of personal information.
The current New Mexico case revisits those issues through state consumer protection law. The state argued that Meta’s public communications about privacy did not adequately reflect the risks associated with its platform and third-party access to user data.
Meta Rejects the Ruling and Plans to Appeal
Meta has disputed the state’s claims and indicated that it intends to appeal the verdict and penalty. The company has argued that its statements about privacy must be considered in context and that New Mexico failed to demonstrate that consumers were actually misled or harmed in the way the state alleged.
Meta has also challenged the calculation of the penalty, arguing that a multibillion-dollar award based on the number of alleged violations raises constitutional concerns involving due process and excessive fines.
The company has said the ruling could make it difficult for businesses to operate in New Mexico under the state’s interpretation of consumer protection law.
New Mexico’s attorney general, by contrast, has described the decision as an important accountability measure for large technology companies. The state maintains that companies should face meaningful consequences when their public representations about privacy are found to be misleading.
The appeal process will be important in determining whether the $25 billion award stands, is reduced or is otherwise modified. Until those proceedings are resolved, the amount should not be treated as a final, uncontestable payment.
How This Case Differs From Meta’s Previous Privacy Penalty
The $25 billion order is separate from Meta’s earlier federal privacy case. In 2019, the US Federal Trade Commission imposed a $5 billion penalty on Facebook over privacy violations, including issues related to the Cambridge Analytica disclosures.
Other states also pursued claims connected to the scandal. Six states later settled related privacy claims for approximately $459.2 million as part of a separate multistate agreement.
New Mexico chose to pursue its own lawsuit to trial rather than resolve its claims through the same settlement route. Its case also included allegations concerning public statements about content moderation and harmful material on Facebook.
These proceedings illustrate that a single major privacy scandal can lead to multiple legal actions involving different authorities, laws and alleged conduct. The penalties should not be added together without considering the scope of each case and any settlement or release of claims.
What the Ruling Means for Big Tech
The case could influence how technology companies assess legal risks associated with privacy disclosures, platform policies and consumer protection claims.
Companies that operate large digital platforms often rely on user data to personalize services and advertising. Regulators and consumers increasingly expect clear explanations of how that information is collected, accessed, shared and protected.
The ruling also demonstrates how state consumer protection laws can become a major enforcement mechanism when a company’s public statements are challenged. A penalty of this scale may encourage other regulators to examine whether their own laws can address similar conduct.
However, the ultimate impact will depend on the appeal, the legal reasoning adopted by higher courts and whether other jurisdictions pursue comparable cases. One state-court judgment does not automatically establish the same legal outcome for every technology company.
The Bigger Picture
The $25 billion order places renewed attention on the long-term consequences of the Cambridge Analytica scandal and the responsibilities of platforms that manage vast amounts of personal information. The New Mexico jury found that Meta’s statements about privacy and content moderation violated state consumer protection law, and the judge imposed a substantial penalty. The ruling also shows how the legal consequences of a data privacy controversy can continue years after the original disclosures.
The case is not yet fully resolved. Meta intends to appeal, and the final financial outcome could change through further legal proceedings. For technology companies, the broader lesson is that privacy policies, public statements and third-party access controls can create significant legal exposure when regulators or juries conclude that consumers were misled. The outcome of Meta’s appeal will help clarify the boundaries of that exposure.
FAQs
1. Why was Meta ordered to pay $25 billion?
A New Mexico judge imposed the penalty after a jury found that Meta committed more than 43 million violations of state consumer protection laws by making misleading statements about Facebook’s privacy practices and content moderation.
2. What is the connection to Cambridge Analytica?
The lawsuit followed revelations that Cambridge Analytica obtained personal data from as many as 87 million Facebook users through a third-party application. New Mexico argued that Meta misled consumers about its data practices and related policies.
3. Will Meta definitely pay the $25 billion?
Not necessarily. Meta has said it plans to appeal. The amount could be upheld, reduced or otherwise changed during further proceedings.
4. Is this the same as Meta’s $5 billion FTC fine?
No. The Federal Trade Commission imposed a separate $5 billion penalty on Facebook in 2019 over privacy-related violations. The New Mexico case is a distinct state-law proceeding.
5. Where will the $25 billion go if the penalty stands?
New Mexico says penalties collected under its consumer protection law are directed toward the state’s education system. The timing of any payment depends on the outcome of the legal proceedings.
Looking Ahead
The immediate focus will be Meta’s appeal and whether the courts uphold the penalty and the method used to calculate it. The case could continue for an extended period, and the final outcome may affect how businesses evaluate consumer protection risks tied to privacy statements and platform policies.
For users and regulators, the dispute reinforces the importance of transparency about how personal information is collected and shared. For Meta, the challenge is to contest the ruling while demonstrating that its privacy controls and public communications meet legal requirements. The decision is a major development in the long-running Cambridge Analytica story, but the appeal will determine how much of the penalty ultimately survives.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.
