New Mexico Court Orders Meta to Pay $25 Billion Privacy Penalty
A New Mexico judge imposed a $25 billion civil penalty on Meta for failing to honor data protection promises after the Cambridge Analytica scandal. The verdict follows a jury finding of over 43 million violations, creating significant regulatory risk and potential cash outflow independent of prior federal settlements.
U.S. District Judge Francis Mathew signed an order on October 21, 2026, requiring social media giant Meta to pay $25 billion in civil penalties. The ruling stems from a lawsuit alleging that Meta violated the New Mexico Unfair Practices Act by misleading state citizens about how it safeguards user data following the Cambridge Analytica scandal.
According to CNBC, a Santa Fe jury found in September that Meta committed over 43 million violations. While the law allows for up to $5,000 per violation—potentially totaling $219.5 billion—the judge set the final penalty at $25 billion. Mathew cited the willful nature of the conduct, its duration, senior leadership involvement, and the breadth of affected users as justification for the maximum allowable penalty level. Interest will accrue at 15% annually until paid.
This case is separate from other recent settlements. In 2022, Meta paid $725 million to settle a class-action suit related to Cambridge Analytica. In August 2026, Meta agreed to a nearly $17 billion settlement with a coalition of state attorneys general regarding child safety and mental health. Because New Mexico did not participate in those agreements, its specific data privacy claims proceeded to trial.
Meta previously appealed a different New Mexico ruling involving child safety, where it was ordered to pay hundreds of millions in damages. The company has not yet publicly stated whether it will appeal this $25 billion privacy penalty. However, the order itself introduces substantial financial and legal uncertainty, directly impacting investor assessments of Meta's regulatory risk profile.