Twenty-five billion dollars is a number Meta can’t wave away as a rounding error. A New Mexico judge ordered the company to pay that sum in penalties after finding it made misleading statements about consumer privacy. It is a rare moment where a privacy promise turned into a very large invoice.
The case, filed in 2021, wasn’t directly about the data Cambridge Analytica harvested. It went after what Facebook told users over the years about their data, their privacy settings and content moderation. That distinction matters. The state didn’t have to prove a specific breach. It had to show that the company’s public assurances didn’t match reality, and a Santa Fe jury agreed in September that Meta violated New Mexico’s Unfair Practices Act.
The jury counted 43 million violations. At up to $5,000 each, the theoretical maximum was about $219 billion. The state asked for $35 billion to $40 billion, with attorney Randi McGinn arguing the court should speak to Meta in the only language it understands, which is money and the value of its stock price. Meta asked for no more than $3.45 billion. Judge Francis Mathew landed at $25 billion.
His language was harsher than the number. He described Facebook’s promised post-scandal investigation as “willfully ineffective” and pointed to “the clear intentional and systematic nature of Facebook’s repeated misstatements.” For anyone who remembers Meta’s repeated vows to fix its data practices after 2018, that is a damning read. A court found that the cleanup was theater, not just that it fell short.
Here’s where it gets interesting. This is separate from the child safety settlement Meta recently reached with nearly every other US state, which included about $459 million for Cambridge Analytica claims. New Mexico skipped that deal, and that is what opened the door to this trial. The state bet it could do better by going alone. Based on the math, it did, by a wide margin.
The money is earmarked for New Mexico’s school system, with interest accruing at 15 percent a year until the penalty is paid in full. Meta says it will appeal. Chief legal officer C.J. Mahoney called the penalty “a tax on speech.” That framing is convenient, but it dodges the point. The finding wasn’t that Meta said something unpopular. It was that Meta told users their data and settings were handled one way when they weren’t.
So what does this mean for users? First, it shows state consumer protection laws can bite harder than the usual regulatory slap. Federal action against big platforms tends to be slow and negotiated. A state attorney general with a deceptive practices statute and a jury produced a bigger number than most settlements ever approach. Other states that took the discount settlement are probably paying attention.
Second, it puts a price on vague privacy language. Companies write policies and settings pages in soft, reassuring terms, and rarely face consequences when practice drifts from promise. This ruling suggests that gap can be treated as fraud, counted per user, and multiplied.
Still, nothing is paid yet. Appeals can shrink or erase penalties, and Meta has the lawyers and the incentive to try. But even a reduced award would set a precedent. If you are a privacy-minded user, the takeaway is blunt: the company’s own statements about your data were just judged intentionally misleading. Treat the next set of assurances accordingly.