New Mexico Orders Meta to Pay $25 Billion Penalty
The state court judgment follows a jury finding that the company misled residents regarding user data collection practices.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Should social media companies face multi-billion dollar fines for mishandling user data?
A New Mexico court has ordered Meta to pay $25 billion in penalties following a jury verdict that found the company liable for misleading state residents about data collection practices. This ruling, which follows a 2021 lawsuit, stems from over 43 million violations of the state's unfair practices act.
Why it matters
The case highlights the state-level legal risks tech companies face regarding historical user data management in the wake of the Cambridge Analytica scandal. It underscores a widening gap between nationwide settlements and localized litigation outcomes.
The judgment accounts for 43 million individual violations of the state's unfair practices act, with a civil penalty of $5,000 per transgression. This final sum was reduced from an initial award of $219.5 billion.
The players
Meta
A global technology company that manages social media platforms and digital advertising networks.
Hector Balderas
The former New Mexico Attorney General who initiated the legal action against Meta in 2021.
The details
A Santa Fe jury determined that Meta failed to accurately disclose how it safeguarded and collected user information, actions linked to the broader Cambridge Analytica scandal. This litigation specifically targeted the company's compliance with New Mexico's unfair practices act, which prohibits deceptive trade practices. The state's case centered on the argument that the company misled its user base regarding data access protocols and the security of stored personal information.
Timeline
2018: The Cambridge Analytica scandal began.
2021: Former Attorney General Hector Balderas filed the state lawsuit.
2022: Meta settled a class action lawsuit for $725 million.
September 2026: The jury trial concluded in Santa Fe.
October 21, 2026: The penalty order was formally filed.
The Tech Race
This penalty diverges from the $17 billion settlement reached by a broader coalition of state attorneys general in August. It reflects the ongoing regional efforts to impose independent oversight on tech giants outside of national-level agreements.
While this judgment is a major legal development, it does not immediately change current platform access or user data controls for residents. The outcome serves as a benchmark for how state courts may address historic data privacy grievances.
The takeaway
This case establishes a significant precedent for how states may independently litigate past data practices despite federal or multi-state resolution attempts. Stakeholders should monitor potential appellate filings in the New Mexico court system to see if the $25 billion penalty stands.
Further reading
For broader context on data privacy legal actions, visit the Cybersecurity section.
Live Poll
Should social media companies face multi-billion dollar fines for mishandling user data?
