On October 21, 2026, a New Mexico judge delivered a decision that reverberated across Silicon Valley: Meta Platforms Inc. was ordered to pay $25 billion in civil penalties for privacy violations tied to the Cambridge Analytica scandal. The ruling, the largest ever against a tech company, followed a jury’s finding that Meta had misled users about how their personal data was handled more than 43 million times.
The jury’s verdict was a stark indictment of Meta’s privacy practices. It held that the company’s promises—“that users controlled their data”—were false. The court found that Facebook’s misrepresentations were not isolated incidents but a systematic pattern at the core of its business model. The jury’s tally of violations—over 43 million—underscores how pervasive the deception was.
🔊 It’s one of the biggest financial penalties in US history. A New Mexico judge has ordered Meta to pay $25 billion after a jury finds the company misled consumers about Facebook data privacy. Listen to the Reuters World News podcast for more https://t.co/3LGcmnsecg https://t.co/pajIfo55ox
Meta’s role in enabling that data harvest was central to the lawsuit, and the court’s findings linked the company’s deceptive practices directly to the scandal.
That settlement, which also addressed privacy concerns, was a precursor to the New Mexico ruling.
New Mexico’s Attorney General, Raul Torrez, framed the case as a battle over whether corporations can mislead consumers about their data without facing meaningful consequences. “This case was ‘about whether corporations can mislead consumers about what happens to their personal information without facing meaningful consequences. New Mexico stood its ground,’” Torrez said. The state’s stance was mirrored by the judge, who described the violations as a systematic pattern of deception.
Woah! Go New Mexico. This is a really important message to Silicon Valley tech companies: you are not above the law
The $25 billion fine follows an $18 billion settlement that Meta reached with 48 other states. That settlement, which also addressed privacy concerns, was a precursor to the New Mexico ruling. The new penalty eclipses the $5 billion fine imposed by the Federal Trade Commission, marking a dramatic escalation in regulatory scrutiny.
Meta has called the penalty a “tax on speech,” arguing that the ruling makes it all but impossible to do business in New Mexico. “This ruling… makes it all but impossible to do business in the state of New Mexico,” Meta’s spokesperson said. The company plans to appeal the decision, asserting that the fine is disproportionate to the alleged violations.
A state judge has ordered Meta to pay New Mexico $25 billion for deceiving users about privacy on Facebook, marking the biggest fine ever against the tech giant. https://t.co/zPpJV11iMd
The case illustrates a growing trend of state‑level enforcement against tech giants. New Mexico’s judge, Francis Mathew, emphasized that Facebook’s misrepresentations were not isolated but systematic. “Facebook’s misrepresentations about users’ control of their data were not isolated incidents, but rather a systematic pattern of deception at the core of Facebook’s business model,” Mathew said.
Meta’s appeal is pending, but the $25 billion judgment stands as a warning to other tech companies: deceptive privacy practices will no longer be tolerated by state courts. The ruling also signals that states are willing to use their consumer‑protection laws to hold big tech accountable, a trend that may reshape how these companies approach user data in the coming years.
The outcome invites a broader conversation about data privacy and corporate responsibility. As the legal landscape evolves, consumers, regulators, and companies alike must grapple with the question: can a platform truly give users control over their data, or is that promise merely a marketing slogan? The New Mexico ruling suggests the answer may be closer to the latter, at least for now.