New Mexico Court Orders Meta to Pay $25 Billion for 43 Million Privacy Violations

The ruling stems from a 2021 lawsuit filed after the Cambridge Analytica scandal exposed how a third-party app harvested data from up to 87 million profiles, including New Mexico users. Judge Mathew's decision cited internal records showing Meta continued misleading privacy assurances despite banning the app in 2015 and demanding data deletion. The 43 million violations represent documented instances where platform claims diverged from actual data-sharing practices exposed in court filings.

Procurement and settlement records reveal a consistent pattern: Meta paid $5 billion to the FTC in 2019, $725 million in a 2022 class-action settlement, and $459 million within an $18 billion multistate agreement in 2024. New Mexico and Florida opted out of the latter, leading to this standalone judgment. Contractual evidence from platform policies and data-sharing agreements shows repeated gaps between stated controls and backend access granted to partners.

Independent analysis of regulatory filings indicates these penalties have not altered core data architecture or third-party access models. Official statements emphasize user consent mechanisms, yet court evidence demonstrates those mechanisms were bypassed at scale. The $25 billion figure exceeds prior U.S. penalties and signals potential for additional state-level actions where multistate deals excluded holdouts.

Meta's chief legal officer stated intent to appeal. Historical precedent from similar awards suggests the final amount will be negotiated downward, but the documented volume of violations creates precedent for sustained regulatory scrutiny across remaining non-settling jurisdictions.