Pull to refresh
Logo
Jury finds Facebook liable for deceiving users about data privacy

Jury finds Facebook liable for deceiving users about data privacy

Rule Changes

Judge orders Meta to pay $25 billion in Cambridge Analytica privacy case

Overview

Updated Oct 27

Judge Francis Mathew ordered Meta on Oct. 21 to pay New Mexico $25 billion, with 15% interest a year until it is paid. A jury found 43.9 million violations of the state's consumer protection law over statements about data privacy, hate speech and misinformation. Mathew wrote that Facebook told users they controlled their data, and that the claim was false.

Meta says it is confident it will win on appeal. New Mexico was the only state to take its Cambridge Analytica claims to trial; others settled in August for about $17.1 billion. Lawyers told Reuters the award is vulnerable because the state counted everyone who might have seen a misleading statement, not just people who did.

Why it matters

A $25 billion penalty, plus 15% annual interest, raises the cost of misleading users about data privacy and could force changes at Meta.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

Can you explain why the state is putting what their claim is on Facebook? It's hard for me to understand how a web page could do so much harm.

The state isn't suing Facebook for being a webpage — it's suing because Facebook told users they controlled their data while letting outside firms like Cambridge Analytica harvest personal information from roughly 87 million profiles, and New Mexico law lets the state seek a penalty for every user exposed to each misleading statement.

The $25 billion verdict treats a tech company's privacy promises as enforceable consumer-protection claims, which could change how every platform talks about data.

4 details4 sources3 disagreements
  • Cambridge Analytica got the data through a personality quiz app ('thisisyourdigitallife') installed by about 270,000 people; the app also collected data on their friends, reaching roughly 87 million Facebook users worldwide. Facebook learned of the leak in December 2015 but didn't tell the public until 2018.
  • The jury found 43,899,725 violations — one for each New Mexico Facebook user exposed to each of 26 misleading statements made by Meta and its leaders, including Mark Zuckerberg and Sheryl Sandberg, between 2010 and 2021.
  • State law allows up to $5,000 per violation, which would have meant $219.5 billion; Judge Francis Mathew reduced it to $25 billion and added 15% annual interest.
  • New Mexico was the only state to take its Cambridge Analytica claims to trial — the other states settled with Meta in August for about $17.1 billion, by comparison.
Room for disagreement
  • Meta argues it does not sell user data and that New Mexico never proved any consumer was actually misled; its lawyers say the penalty is a 'tax on speech' that violates due process and the constitutional bar on excessive fines.
  • Legal observers note the award is vulnerable on appeal because the state counted everyone who could have seen a misleading statement, not just users who saw it — Reuters reported that concern from lawyers familiar with the case.
  • The numbers themselves are contested: the state asked for $35–40 billion, the judge chose $25 billion, and Meta said a maximum of $3.45 billion was warranted.

What I don't ever understand about these things is that everything that everyone puts on Facebook is meant to be made public, at least to their friends and their friends' friends (so basically public). What are the damages from this occurrence?

The damage was not that anything 'public' leaked — it was that Facebook promised users control over their data and then let an outside firm harvest data on about 87 million profiles, including millions of people who never installed the quiz app or agreed to anything, and sell it for political targeting.

Consumer protection law treats the false promise itself as the injury, which is how New Mexico counted 43.9 million violations instead of one breach — and produced the largest fine ever levied against Meta.

4 details4 sources2 disagreements
  • The app at the center of the case, thisisyourdigitallife, was installed by about 270,000 people, but its data reach spanned roughly 87 million profiles — nearly all of them people who never installed it or gave permission.
  • Facebook publicly promised in 2014-15 to stop letting apps pull data from users' friends, but quietly kept exemptions for favored partners, and the judge concluded that promise that users controlled their data was false.
  • Facebook's own probe linked at least 1,585 apps to data misuse touching at least 1,146,225 New Mexico accounts — yet the state says it never told those users.
  • Cambridge Analytica used the harvested data for targeted political advertising, including work for the 2016 Trump campaign — use nobody consented to and most users learned about only in 2018.
Room for disagreement
  • Meta argues the state never proved any New Mexican saw the misleading statements or was harmed, and that a $25 billion penalty is unconstitutionally excessive; legal experts told Reuters the verdict is vulnerable because the state counted everyone who might have seen a statement, not just people who did.
  • FIRE, a free-speech group, says the verdict is fundamentally about speech — it penalizes 26 statements Facebook made about its own policies, multiplied by New Mexico's population — and argues that threatens honest corporate speech about content moderation.

Okay thanks for the explanation. It's clear now: it was a money grab by the state.

It's a penalty under a consumer protection law, not a simple money grab — but the way New Mexico counted violations is exactly what Meta and outside experts say makes the award unfair.

If it survives appeal, the verdict shows states can use per-person penalty math to force tech giants to pay enormous sums for deceptive statements.

5 details3 sources2 disagreements
  • New Mexico was the only state to take its Cambridge Analytica claims to trial; 48 other states settled in August for about $17.1 billion.
  • The jury tallied 43,899,725 violations by counting each misleading statement against every Facebook user in New Mexico; the judge cut the maximum $219.5 billion penalty to $25 billion plus 15% annual interest.
  • Under New Mexico's constitution, the money goes to state education spending; the attorney general said it could fund schools for 100 years.
  • Meta says the state never proved any New Mexican saw the statements or was harmed, and argues the proper penalty was no more than $3.45 billion.
  • Legal experts told Reuters the award is vulnerable because the state counted everyone who might have seen a misleading statement, not just people who did.
Room for disagreement
  • Meta and some legal experts say the state inflated the penalty by counting every person who could have seen a statement rather than proving actual harm; the state says the misleading statements were directed at the entire New Mexico population, so each exposure is a separate violation.
  • FIRE argues the verdict is fundamentally about speech and threatens Meta's ability to moderate content; the state says it is a consumer protection case about broken promises on data privacy.

Give me a break: $25 billion to one state? That's ridiculous.

The $25 billion is statutory math: a jury counted more than 43.9 million violations at a $5,000-per-violation cap, giving a $219.5 billion maximum that Judge Francis Mathew then cut to $25 billion — and that counting method is exactly why Meta and legal experts expect the award to shrink or fall on appeal.

This is the largest fine ever imposed on Meta, and it tests whether a state can price consumer deception by audience size rather than by proven harm.

4 details3 sources2 disagreements
  • The jury found more than 43.9 million violations of New Mexico's Unfair Practices Act; at the $5,000 statutory maximum per violation, the top penalty was $219.5 billion, which the judge reduced to $25 billion with 15% annual interest.
  • New Mexico counted every person who might have heard or seen 26 statements by Zuckerberg, Sandberg and other executives as a separate violation — for some statements, even people who never had Facebook accounts. Meta says no evidence shows anyone actually saw the statements or was harmed.
  • New Mexico was the only state to take Cambridge Analytica claims to trial; 48 other states settled in August for about $17.1 billion.
  • Under the New Mexico Constitution, the money goes to education. Attorney General Raúl Torrez called the verdict 'an unambiguous message' to Silicon Valley.
Room for disagreement
  • Meta and the Foundation for Individual Rights and Expression argue the verdict is fundamentally about speech: the state multiplied 26 statements by the number of people who might have heard them, regardless of whether anyone was deceived, which they say violates due process. Meta's lawyers argued the penalty should be no more than $3.4 billion.
  • The state argued Facebook's false public statements deceived New Mexico's entire population, asked for $35–40 billion, and pointed to the jury's finding that the violations were willful.
0 AI answers with web search. May be wrong.

Key Indicators

43.9 million
Violations of New Mexico consumer protection law found by jury
Published tallies of the verdict form put the total at about 43.9 million; Reuters described it as more than 43 million.
$5,000
Maximum penalty per violation allowed by state law
Judge Mathew applied the cap to calculate the maximum award.
$219.5 billion
Maximum penalty the judge calculated
Multiplying the $5,000 cap by the roughly 43.9 million violations produced about $219.5 billion, which the judge reduced to $25 billion.
$25 billion
Civil penalty ordered against Meta
Judge Francis Mathew ordered the award on Oct. 21; Meta says it will appeal.
15%
Annual interest on the unpaid penalty
The judgment says interest accrues at 15% per year until the penalty is paid.
$17.1 billion
Meta's August multistate settlement
Seven states settled Cambridge Analytica claims for $459.2 million as part of a $17.1 billion multistate settlement Meta reached in August; New Mexico did not sign.
87 million
Facebook profiles harvested by Cambridge Analytica globally
A third-party personality quiz sold profile data to the political consulting firm for targeted ads.
26 of 29
Executive statements the jury found misleading
Statements by Zuckerberg, Sandberg and others were found misleading about data control and content policies.

Voices

Curated perspectives — historical figures and your fellow readers.

Sign up to generate historical perspectives on this story.

People Involved

Organizations Involved

Timeline

March 2018 October 2026

13 events Latest: October 21st, 2026 · 3 weeks ago Showing 8 of 13
Tap a bar to jump to that date
  1. Meta says it expects to win on appeal

    Corporate

    Chief legal officer CJ Mahoney said in a statement that Meta is confident it will win on appeal of the $25 billion judgment.

  2. Brazil's electoral court presses Meta over alleged bias

    International

    Brazil's Superior Electoral Court asked Meta to show that Instagram and Facebook treated Luiz Inácio Lula da Silva and Flávio Bolsonaro equally before the Oct. 25 presidential runoff. The government said Lula's account was briefly suspended and his rival's posts spread further; Meta blamed technical errors.

  3. Meta says it disagrees with the jury's decision

    Corporate

    Meta said it disagrees with the jury's decision and intends to continue defending its position.

  4. Meta shares fall 3.33% after verdict

    Financial

    Meta stock fell 3.33% to close at $751.66 on the day the jury found Facebook liable, according to Insider Monkey.

  5. FTC fines Facebook $5 billion

    Regulatory

    Federal Trade Commission fines Facebook $5 billion for privacy violations tied to Cambridge Analytica.

  6. Cambridge Analytica collapses

    Corporate

    Cambridge Analytica shuts down following the scandal and loss of clients.

  7. Zuckerberg testifies before Congress

    Testimony

    Mark Zuckerberg testifies before Congress about Facebook's data handling and privacy controls.

  8. Cambridge Analytica data harvesting exposed

    Revelation

    News reports reveal Cambridge Analytica harvested data from up to 87 million Facebook profiles.

Scenarios

1

Judge orders penalty exceeding $50 billion

Unlikely Resolves by Q1 2027

Discussed by: New Mexico Attorney General's Office, which is pressing for the maximum

Mathew applies the $5,000 cap across most of the 43 million violations, producing a penalty in the tens of billions or higher. Torrez's office argued the violations affected New Mexico's entire population of more than two million people, which would justify the full per-violation rate. Such an award would face heavy scrutiny on appeal.

2

Meta appeals the verdict to New Mexico appellate courts

Likely Resolves by Q2 2027

Discussed by: Reuters and Associated Press legal coverage

After Mathew sets the penalty, Meta files a notice of appeal. New Mexico civil appeals must typically be filed within 30 days of a final judgment, taking the case to the New Mexico Court of Appeals and potentially the state Supreme Court. An appeal could delay any payment for years while the verdict is reviewed.

3

Meta settles with New Mexico before appeal resolves

Possible Resolves by Q2 2028

Discussed by: Reuters legal coverage

Rather than litigate for years, Meta negotiates a settlement with the state. A deal would lock in a payment below the maximum but guarantee the state a win, and could include commitments to change data practices and submit to external audits. Both sides have incentives to avoid an extended and expensive appeal.

4

Penalty lands below $10 billion

Deadline passed (Oct 1, 2026)

Discussed by: Reuters and Associated Press legal coverage

Judge Mathew could apply the $5,000 cap to only part of the 43.9 million violations, or adopt Meta's argument that repeated public statements should count once, not per user. That would produce a penalty in the single-digit billions.

5

Judge awards $35-40 billion in penalties

Possible

Discussed by: State prosecutors and Courthouse News Service

Judge Mathew issues a penalty within the range requested by the state. This would be the largest civil judgment in U.S. history and likely trigger an immediate appeal by Meta.

6

Meta asks the US Supreme Court to review the penalty

Unlikely Resolves by Q2 2029

Discussed by: Peter Ormerod, law professor at Villanova University, quoted by Reuters

If New Mexico's appeals courts uphold the judgment, Meta could argue the award violates US constitutional protections against excessive fines and deprives the company of due process. The Supreme Court grants a small share of the petitions it receives.

Historical Context

2 moments from history that rhyme with this story — and how they unfolded.

July 2019

FTC fines Facebook $5 billion (2019)

The Federal Trade Commission fined Facebook $5 billion for violating a 2012 privacy consent decree, after the Cambridge Analytica scandal exposed that third-party apps had harvested data from up to 87 million users. It was the largest privacy penalty the FTC had ever imposed.

Then

Facebook paid the fine without admitting wrongdoing and agreed to create an independent privacy committee.

Now

Critics called the fine a small fraction of Facebook's annual revenue, and it left state attorneys general free to pursue their own actions.

Why this matters now

New Mexico's consumer protection case uses a different enforcement route with steeper per-violation penalties, producing exposure the FTC settlement did not create.

November 1998

Tobacco Master Settlement Agreement (1998)

Forty-six state attorneys general settled consumer protection litigation with the major tobacco companies over deceptive marketing. The companies agreed to pay states roughly $206 billion over 25 years and to restrict advertising aimed at minors.

Then

The settlement channeled massive annual payments to state governments and imposed lasting marketing restrictions.

Now

It established state attorneys general as a powerful enforcement channel against industries that mislead consumers.

Why this matters now

New Mexico's case against Meta follows the same playbook: a state attorney general using consumer protection law with penalties that scale per violation.

Sources

(35)