Meta Ordered to Pay $25 Billion in New Mexico Over Facebook’s Cambridge Analytica Privacy Scandal
Landmark court ruling finds Facebook’s parent company responsible for nearly 44 million consumer protection violations, delivering one of the largest financial penalties ever imposed on a technology company.
By A.T.L. N.E.W.S. Staff | October 21, 2026
NATIONAL NEWS | TECHNOLOGY & CONSUMER PRIVACY
Meta Platforms, the parent company of Facebook, Instagram and WhatsApp, has been ordered to pay $25 billion in civil penalties following a landmark New Mexico court ruling connected to the Cambridge Analytica data privacy scandal. The decision represents one of the largest financial judgments against a technology company in American history and marks a major victory for state regulators seeking greater accountability from social media corporations.
New Mexico First Judicial District Judge Francis Mathew issued the ruling Wednesday, October 21, after a jury determined that Facebook repeatedly violated the state’s consumer protection laws by misleading users about how their personal information was collected, shared and protected. The case also examined statements the company made regarding misinformation and hate speech on its platform.
The ruling stems from the Cambridge Analytica controversy, which exposed how personal information belonging to millions of Facebook users was obtained without their informed consent and used for political targeting during the 2016 presidential election.
Nearly 44 Million Violations of Consumer Protection Laws
The legal battle reached a turning point on September 25, when a New Mexico jury found Facebook responsible for 43,899,725 violations of the state’s Unfair Practices Act. Jurors concluded that the company had made misleading representations to consumers about its privacy policies and how it handled personal information.
Under New Mexico law, individual violations can carry civil penalties of up to $5,000. The number of violations potentially exposed Meta to penalties exceeding $219 billion. However, Judge Mathew ultimately established the financial penalty at $25 billion, still a historic amount for a state consumer protection case.
The judgment represents a significant escalation in efforts by state governments to challenge the business practices of powerful technology companies. Unlike previous settlements reached through negotiations, New Mexico pursued its claims through trial, securing both a jury verdict and a substantial court-imposed penalty.
The Cambridge Analytica Scandal That Sparked the Lawsuit
The Cambridge Analytica controversy became public in 2018, when investigations revealed that the British political consulting company had improperly obtained personal information associated with as many as 87 million Facebook users.
The data was collected through a third-party personality-testing application that accessed information from participating users and, through Facebook’s permissions system at the time, information associated with some of their friends. Many affected individuals had never directly authorized Cambridge Analytica to obtain their data.
Cambridge Analytica worked with Donald Trump’s 2016 presidential campaign, raising concerns about how personal information gathered through social media could be used to build political profiles and influence voters. The revelations triggered investigations, congressional hearings and broader debate over whether Facebook had adequately protected its users.
The scandal also damaged public confidence in Facebook’s assurances that users maintained meaningful control over their personal information. While the company subsequently announced privacy changes, regulators continued examining whether its earlier statements to consumers had been deceptive.
New Mexico Refuses to Settle
Rather than resolve its claims through the broader settlements pursued elsewhere, New Mexico continued its legal challenge against Facebook.
Attorney General Raúl Torrez’s office argued that the company’s conduct violated state consumer protection requirements and that its public statements about data privacy, misinformation and hate speech did not accurately reflect the way Facebook operated.
The case tested whether a state could hold a major social media company financially accountable for statements made to millions of users, even when those statements were part of the company’s nationwide operations.
New Mexico’s decision to pursue the case independently ultimately produced a penalty exceeding Facebook’s earlier federal privacy fine by five times.
Meta Plans to Appeal the Judgment
Meta disputes the findings and is expected to challenge the $25 billion ruling through the appeals process. The company maintains that it did not mislead users about its privacy practices and argues that the state failed to establish the individual harm necessary to justify such a substantial financial penalty.
Meta has also challenged the size of the award, describing it as excessive and unconstitutional. An appeal could delay collection of the money and potentially alter the final judgment. Therefore, Wednesday’s ruling does not mean the state has already received the $25 billion.
Despite the size of the penalty, Meta remains one of the world’s most valuable technology companies, with a market valuation approaching $2 trillion. Nevertheless, the ruling presents a serious legal challenge that could influence other efforts to hold social media platforms accountable for consumer privacy practices.
New Mexico’s Growing Legal Challenges Against Meta
The latest judgment follows another major New Mexico legal victory against the company earlier this year, although the two cases involve different allegations.
In August, a New Mexico court imposed financial obligations totaling $942 million against Meta in litigation concerning the safety of children using Facebook and Instagram. That ruling also required changes to the company’s youth protections, including age-verification measures, safeguards against exploitation and restrictions on certain features affecting minors.
Together, the cases illustrate New Mexico’s increasingly aggressive approach to regulating social media companies through its courts and consumer protection laws.
A Major Test of Big Tech Accountability
The $25 billion judgment raises broader questions about corporate responsibility in an era when social media platforms collect enormous amounts of personal information and exercise significant influence over digital communication.
For consumers, the Cambridge Analytica controversy demonstrated how data shared with one application could potentially reach organizations and political interests far beyond its original intended audience. For regulators, the New Mexico judgment illustrates the financial consequences companies may face when representations about data protection are found to violate consumer laws.
The ruling may also encourage closer scrutiny of how technology companies explain their privacy practices, obtain meaningful user consent and disclose the ways information is shared with outside organizations.
Although Meta’s anticipated appeal means the final outcome remains uncertain, the New Mexico decision establishes an important moment in the continuing debate over the responsibilities of technology companies and the rights of the people who use their services.
Nearly a decade after the 2016 presidential election placed Cambridge Analytica at the center of an international privacy controversy, its legal consequences are continuing to unfold.
