Meta Hit With $25 Billion Fine in New Mexico Privacy Case

Meta must pay $25 billion to New Mexico after a jury found the company misled users about Facebook data privacy — one of the largest corporate penalties in US history.

What Just Happened: Meta’s $25 Billion New Mexico Fine

On October 21, 2026, a judge in New Mexico ordered Meta Platforms to pay the state $25 billion after a jury found the company had deceived Facebook users about how their personal data was handled. State Attorney General Raúl Torrez called it one of the largest financial penalties ever imposed on a corporation in US history.

Image: Coolcaesar via Wikimedia Commons (CC BY-SA 3.0)

The ruling came more than three weeks after a jury concluded in September that Facebook had committed over 43 million violations of New Mexico’s consumer protection laws. The jurors found that 26 of 29 public statements made by the company and its leadership about privacy and data access were misleading.

“For too long, powerful technology companies have operated as though their size and influence put them beyond the reach of the law,” Torrez said in a statement. “This case has always been about more than one company or one scandal. It is about whether corporations can mislead consumers about what happens to their personal information without facing meaningful consequences.”

Why New Mexico Sued Meta Over Data Privacy

The case began in 2021, when Torrez sued Meta following revelations about Cambridge Analytica, a now-defunct British political consulting firm that worked on Donald Trump’s 2016 presidential campaign. A simple personality quiz app collected data from an estimated 87 million Facebook profiles — often without those users’ knowledge — and turned it over to the firm, which used it to build targeted election ads.

Image: Jim Bowen via Wikimedia Commons (CC BY 2.0)

New Mexico accused Meta of lying to users in the state about who had access to their data, how the company handled hate speech and misinformation, and other internal policies. The state argued the company knew third parties had broad access to users’ personal information.

How the $25 Billion Penalty Was Decided

Here is where the numbers get interesting. Judge Francis Mathew calculated that state law, which allows up to $5,000 per violation, actually justified more than $219 billion in penalties. He reduced that figure to $25 billion, in part to keep it within constitutional limits.

“Facebook’s wrongdoing — over the course of years and systematically broadcast to the public — goes to the heart of Facebook’s core business practices,” Mathew wrote in his order.

For perspective, the state had asked for $35 to $40 billion, while Meta’s lawyers argued for no more than $3.4 billion. The final $25 billion dwarfs the $5 billion fine the US Federal Trade Commission imposed on Meta in 2019 over the same Cambridge Analytica scandal. It also stands out because 48 other states settled their related cases with Meta — New Mexico chose to take the company to trial on its own.

Where does the money go?

Under New Mexico law, fines from consumer protection cases fund state education. Torrez said the verdict should serve as a warning to Silicon Valley: “This judgement should be a signal, an unambiguous message, to Silicon Valley.”

What Meta Says — and What Happens Next

Meta is not taking the ruling quietly. C.J. Mahoney, the company’s chief legal officer, said: “This ruling, and the Attorney General’s approach to this enforcement, makes it all but impossible to do business in the state of New Mexico. At its core, this lawsuit seeks to impose a tax on speech to enforce new rules for what people can say online. We are confident we will prevail on appeal.”

Expect a long appeals process. Meta has deep pockets and a history of fighting regulatory battles for years. The $25 billion will not change hands anytime soon — but the ruling itself sends a message that state courts are willing to impose penalties far beyond anything seen before.

Why This Matters for You: Protecting Your Facebook Data

You do not live in New Mexico for this story to matter. The case is a reminder of how much personal information flows through the apps on your phone — and how little control you may have over it. Here are practical steps anyone can take today:

• Review third-party apps: In Facebook’s settings, check which apps and websites can access your account, and remove the ones you no longer use. Quiz apps and games are the classic way data leaks out.
• Limit what you share: Audit your profile’s public fields — birthday, location, relationship status — and set them to friends-only or remove them.
• Check privacy checkups: Both Facebook and Instagram offer built-in privacy checkup tools that walk you through the key settings in a few minutes.
• Think before you tap: Fun quizzes that ask for your profile data are exactly how the Cambridge Analytica data was harvested. If an app wants access to your friend list, say no.
• Stay informed: Follow more cybersecurity news and more technology news to keep up with how companies handle your data.

Whether Meta ultimately pays $25 billion or wins on appeal, the New Mexico case marks a turning point: regulators are done asking nicely. For the rest of us, it is a good moment to take five minutes and lock down our own privacy settings.

Sources: USA Today, Reuters via The Straits Times, Hindustan Times