A US court has ordered Meta to pay $25 billion after a jury found more than 43 million violations of state consumer protection law, escalating scrutiny of how Facebook handles personal data.
SANTA FE, New Mexico, October 22, 2026 — Meta Platforms has been ordered to pay $25 billion in civil penalties in New Mexico after a jury found that the company misled consumers about Facebook’s data privacy practices and the handling of harmful content. The ruling marks a major legal setback for the owner of Facebook, Instagram and WhatsApp and revives questions raised by the Cambridge Analytica scandal.
District Judge Francis J. Mathew issued the order on October 21, following a jury verdict that found Meta responsible for more than 43 million violations of New Mexico’s consumer protection law. The case centred on statements made by Facebook and its leadership about who could access users’ personal information, how the platform handled misinformation and hate speech, and whether consumers had meaningful control over their data.
The judge said the company’s conduct had continued over several years and was closely connected to its core business practices. Although the court calculated that the maximum penalty under state law would have exceeded $219 billion, it reduced the amount Meta must pay to $25 billion.
Meta has disputed the outcome and said it plans to appeal. The ruling is therefore a significant legal development, but it may not be the final word in the case.
The 60-Second Brief
- Penalty: A New Mexico judge ordered Meta to pay $25 billion in civil penalties.
- Jury findings: Jurors found that 26 of 29 statements by the company and its leadership were misleading.
- Scale of violations: The jury found more than 43 million violations of the state’s consumer protection law.
- Cambridge Analytica connection: The case followed revelations that a political consulting firm obtained data associated with as many as 87 million Facebook users through a third-party app.
- Meta’s response: The company disputes the ruling and plans to appeal.
- Where the money goes: New Mexico officials say the penalty proceeds are intended for the state’s school system, subject to the legal process.
Why Has Meta Been Ordered to Pay $25 Billion?
New Mexico sued Meta in 2021, accusing the company of misleading Facebook users about the privacy of their personal information and the platform’s handling of harmful content.
The state argued that Facebook had not been sufficiently transparent about third-party access to user data. It also alleged that the company tolerated hate speech and other harmful material while making public statements that gave consumers an inaccurate impression of its policies and safeguards.
The jury examined 29 statements made by Facebook and its leadership. It concluded that 26 were misleading and found more than 43 million violations of New Mexico’s Unfair Practices Act.
Under state law, civil penalties can reach $5,000 per violation. Applying that maximum to the number of violations identified in the case produced a potential penalty of more than $219 billion.
New Mexico’s lawyers had asked the court to impose a penalty of between $35 billion and $40 billion, arguing that a substantial financial consequence was necessary to hold a major technology company accountable. Meta, by contrast, had asked the court to limit the penalty to approximately $3.45 billion.
Judge Mathew ultimately set the amount at $25 billion. The written order also provides for interest at 15% annually until the penalty is paid in full. The question of additional court-ordered changes to Meta’s practices remains subject to further proceedings.
What Was the Cambridge Analytica Scandal?
The case traces back to the Cambridge Analytica controversy, which became a global symbol of concerns about personal data and political advertising.
Cambridge Analytica, a British political consulting firm, obtained Facebook user information through a third-party application. The data was reportedly collected from as many as 87 million profiles, including information connected to people who had not directly consented to the collection.
The firm was associated with political campaigns, including Donald Trump’s 2016 US presidential campaign. The scandal raised questions about how information gathered through social media could be used to build voter profiles and target political messages.
The New Mexico case goes beyond the original data collection. The state argued that Facebook misrepresented the extent of third-party access to personal information and failed to give users an accurate picture of the platform’s privacy protections.
The jury’s findings focused on the company’s statements and practices under state consumer protection law. They should not be confused with a finding that every Facebook user’s data was used by Cambridge Analytica or that every political advertisement was unlawful.
What Did Meta Say in Its Defence?
Meta has rejected the state’s claims and challenged the basis for the penalty. The company argued that it does not sell users’ personal data and said New Mexico had not established that individual consumers were actually misled in the manner alleged.
Its lawyers also argued that a penalty of this size could threaten the company’s ability to operate in the state and raise constitutional concerns. Meta has said it expects to prevail on appeal.
The dispute now turns partly on how the courts interpret the number of violations, the legal basis for the penalty and whether the amount withstands further review. An appeal could alter the judgment or the amount ultimately payable.
For now, the order represents a major financial penalty, but it does not mean Meta has exhausted its legal options.
Is This Meta’s First Major Setback in New Mexico?
No. The company has faced another major legal case in New Mexico involving the safety of young users on its platforms.
In an earlier proceeding, a jury found that Meta had misled consumers about the safety of children and teenagers using Facebook and Instagram. The case resulted in a $375 million civil penalty. A later phase of the proceedings led to a further order directing $567 million towards a fund addressing youth mental health and requiring safety-related measures for teenage users in the state.
Those proceedings concerned youth safety and alleged harm to young users, while the $25 billion case centres on data privacy, consumer deception and the handling of harmful content. The cases are separate, even though both concern the company’s responsibilities to users.
The latest ruling adds to the legal and regulatory pressure facing Meta as governments, courts and families debate how technology platforms should protect users and disclose the risks associated with their services.
What Does the Ruling Mean for Facebook Users?
For ordinary users, the case highlights a basic question: how much control do people actually have over their personal information when they sign up for a social media platform?
Privacy settings, third-party applications, targeted advertising and content moderation can be difficult for users to understand. The New Mexico jury’s findings underline the importance of clear explanations about what information is collected, who can access it and how it may be used.
The decision also reinforces the role of state consumer protection laws in regulating technology companies. A company can face legal consequences when its statements about privacy or safety are found to violate those laws, even when the underlying services are offered nationally or globally.
However, the ruling does not automatically establish that every user has a personal claim for compensation. The penalty is a civil award to the state under its law, and the proceeds are intended for New Mexico’s education system.
Why the $25 Billion Penalty Matters
The scale of the penalty sends a significant signal about the potential financial consequences of consumer protection violations involving digital platforms. The case also demonstrates how the calculation of penalties can become a central issue when a jury identifies millions of alleged violations.
The final financial impact on Meta will depend on the outcome of its appeal, the treatment of the penalty by higher courts and the eventual resolution of any related proceedings. The company’s size does not remove the legal uncertainty surrounding the case, but the ruling alone does not establish the amount that will ultimately remain payable after all appeals.
For regulators and technology companies, the case could become an important reference point in future disputes over data transparency, platform safety and consumer protection.
The Bottom Line
Meta’s $25 billion penalty in New Mexico brings the Cambridge Analytica controversy back into focus years after the scandal first exposed the risks of large-scale personal data collection. The jury found that Facebook’s statements misled consumers and that the company violated state consumer protection law millions of times.
Meta plans to appeal, so the legal battle is not necessarily over. But the case highlights a lasting issue for the technology industry: platforms that collect and use personal information face growing pressure to explain their practices clearly and demonstrate that their privacy and safety commitments match how their services operate.
