Meta Platforms, the parent company of Facebook and Instagram, has been ordered to pay $25 billion to New Mexico following a landmark consumer-protection case over allegations that the company misled users about data privacy and its handling of harmful content. The judgment, issued on October 21, 2026, follows a jury finding that Meta made misleading statements to consumers and violated New Mexico’s consumer-protection law more than 43 million times.
The ruling is one of the most significant financial penalties imposed on a major technology company in a state consumer-protection case. It stems from a lawsuit filed in 2021 after revelations about Cambridge Analytica, a political consulting firm that obtained personal information from Facebook users through a third-party application.
New Mexico alleged that Meta misrepresented how users’ information could be accessed and how the company handled hate speech, misinformation, and other harmful material on its platform. Meta disputed the allegations and argued that the proposed penalties were excessive.
The $25 billion judgment is not the same as a previously issued penalty in a separate New Mexico lawsuit concerning children’s safety on social media. The two cases involve different legal claims and should be considered separately.
What Happened in the Meta Privacy Lawsuit?
The latest ruling followed a jury verdict delivered on September 25, 2026. Jurors found that 26 of 29 statements made by Meta and its leadership were misleading. The jury determined that the statements resulted in more than 43 million violations of New Mexico’s Unfair Practices Act.
Under state law, the maximum civil penalty is $5,000 per violation. Applying that maximum to the violations identified in the case would have produced a penalty exceeding $219 billion.
Judge Francis Mathew subsequently reduced the amount Meta must pay to $25 billion. The court’s decision followed arguments from both sides over the appropriate penalty and whether a much larger amount would be legally proportionate.
New Mexico’s legal team had requested a penalty of approximately $35 billion to $40 billion. Meta, by contrast, urged the court to limit the penalty to approximately $3.45 billion.
The final $25 billion judgment represents a substantial financial consequence for the company, although Meta has indicated that it plans to appeal.
Why Did New Mexico Sue Meta?
New Mexico Attorney General Raúl Torrez filed the privacy lawsuit in 2021 following the Cambridge Analytica controversy.
The state alleged that Meta misled Facebook users about who could access their personal information and the company’s practices regarding harmful content. Prosecutors also argued that the company’s public representations did not accurately reflect the risks associated with its platform.
Meta’s position was that it does not sell users’ personal data and that the state had not demonstrated that consumers were actually misled. The company challenged the scale of the proposed financial penalties.
The dispute therefore centered on more than whether information was directly sold to third parties. It also concerned what users were told about access to their data, the company’s privacy practices, and whether those representations violated state consumer-protection law.
The jury’s verdict resolved the relevant liability questions in the state’s favor at trial. However, the judgment remains subject to the legal process, including Meta’s announced intention to appeal.
The Cambridge Analytica Scandal: Background and History
The case has its roots in the Cambridge Analytica controversy, which became a major international data-privacy issue in 2018.
Cambridge Analytica, a British political consulting firm, obtained Facebook user information through a third-party application. Reports indicated that personal information associated with as many as 87 million Facebook users may have been affected.
The controversy raised questions about how Facebook allowed outside applications to access user information, how that information could subsequently be used, and whether users understood the extent of the data collection.
The incident attracted scrutiny from regulators, lawmakers, and privacy advocates. It also intensified public debate about the responsibilities of social media companies when collecting, sharing, and protecting personal information.
In 2019, the U.S. Federal Trade Commission announced a $5 billion settlement with Facebook over privacy-related violations. That settlement was a separate federal enforcement action and should not be confused with the $25 billion New Mexico judgment.
The New Mexico lawsuit illustrates how the same broader controversy can lead to separate legal proceedings under different laws and involving different government authorities.
How Was the $25 Billion Penalty Calculated?
The size of the judgment reflects the way New Mexico’s consumer-protection law calculates civil penalties.
The jury identified more than 43 million violations associated with the misleading statements. State law permits penalties of up to $5,000 per violation, creating a potential amount exceeding $219 billion when the maximum is applied across the violations.
Judge Mathew reduced the amount to $25 billion after considering the case and the arguments over proportionality.
New Mexico officials said the penalty would go to the state’s school system. This makes the case particularly significant for public finances, because the judgment could potentially provide substantial funding for education if it survives the appeals process and is collected.
However, the judgment should not be interpreted as an immediate cash payment already received by the state. Meta has indicated that it will challenge the decision, and the final amount ultimately payable could depend on the outcome of further proceedings.
Meta’s Response and Possible Appeal
Meta disagreed with the ruling and said it plans to appeal.
During the proceedings, the company argued that the proposed penalty was excessive and could discourage businesses from operating in New Mexico. It also disputed the state’s claims that consumers had been misled.
An appeal could challenge aspects of the jury’s findings, the legal interpretation of the state’s consumer-protection law, or the amount of the penalty. The outcome will depend on the arguments presented and the reviewing court’s decision.
For now, the $25 billion judgment represents the court’s ruling, but the appeal process could affect the final financial consequences.
How This Case Differs From the New Mexico Child-Safety Lawsuit
Meta is also facing a separate case brought by New Mexico over the safety of children using Facebook, Instagram, and WhatsApp.
In March 2026, a jury in that case found Meta liable under the state’s consumer-protection law and awarded $375 million in civil penalties. In August, the court ordered an additional $567 million for measures addressing alleged public harm and imposed court-supervised reforms intended to strengthen protections for young users.
That brought the financial exposure in the separate child-safety case to $942 million, alongside the required reforms.
The privacy judgment announced on October 21 is a distinct case involving alleged misleading statements about data privacy and related company practices. The two judgments should not be combined into a single penalty without explaining their separate legal bases.
Taken together, however, the cases demonstrate the range of legal challenges Meta faces over privacy, transparency, platform safety, and consumer protection.
Why the Judgment Matters for the Technology Industry
The $25 billion ruling could have implications beyond Meta itself.
First, it highlights the potential financial consequences of allegedly misleading consumers about how a digital platform operates. Companies that collect large amounts of personal information may face increased scrutiny over their public statements, privacy disclosures, and the accuracy of their explanations to users.
Second, the case demonstrates the power of state consumer-protection laws. State attorneys general can bring enforcement actions that result in substantial penalties when a company is found to have violated applicable state law.
Third, the judgment may encourage companies to review how they communicate privacy practices and third-party data access to customers. Clear disclosures and effective oversight of applications that use personal information can be important parts of a company’s compliance strategy.
Nevertheless, the ruling does not mean every technology company will face a similar penalty. The outcome depends on the evidence, applicable law, number of violations established, and the court’s assessment of the appropriate remedy.
What Happens Next?
The next major development will be the appeal process.
If the judgment is upheld, Meta could face a $25 billion obligation under the court’s order, with substantial implications for the company’s legal exposure and for New Mexico’s public finances. If an appellate court changes the ruling or penalty, the final amount could be different.
The case may also influence how other states approach consumer-protection enforcement involving data privacy and digital platforms.
For consumers, the broader issue is whether social media companies provide sufficiently accurate information about the collection, use, and accessibility of personal data. The case has renewed attention on the relationship between user trust, corporate transparency, and legal accountability.
Conclusion
The $25 billion judgment against Meta marks a major development in the long-running debate over digital privacy and the responsibilities of technology companies.
The case began with concerns about Facebook’s handling of user information following the Cambridge Analytica controversy. It ultimately led to a jury finding that Meta made misleading statements and violated New Mexico’s consumer-protection law more than 43 million times.
Judge Francis Mathew reduced the potential penalty of more than $219 billion to $25 billion. Meta disputes the ruling and plans to appeal, meaning the legal process is not necessarily over.
The case also underscores the importance of distinguishing between Meta’s separate legal disputes. The privacy judgment is different from the New Mexico child-safety case, which resulted in a separate $942 million financial judgment and platform reforms.
The ultimate significance of the privacy ruling will depend on what happens during the appeal. Regardless of the final amount, the case represents a major test of how state consumer-protection laws can be applied to the business practices of large technology platforms.
