Meta Ordered to Pay $25 Billion in New Mexico Privacy Case Linked to Cambridge Analytica Scandal

A New Mexico court has ordered Meta to pay $25 billion in penalties following a data privacy lawsuit alleging that the company misled consumers about how their personal information was handled. The ruling, issued on October 21, 2026, relates to more than 43 million alleged violations of the state's unfair practices law and follows years of scrutiny over Facebook's privacy practices.

According to reports from multiple news organizations, State District Court Judge Francis J. Mathew criticized Meta and Facebook for making misleading statements about consumer privacy. In his ruling, Mathew wrote that Facebook had promised users control over their data, adding that the promise was false.

Meta's legal team has criticized the penalty, and the company has said it intends to appeal the decision.

Cambridge Analytica Scandal at the Center of the Case

The lawsuit, filed in 2021, followed revelations that Cambridge Analytica, a British political consulting firm, obtained Facebook users' personal information without their consent and used it to build psychographic profiles.

The data was collected through a personality quiz application called thisisyourdigitallife. Approximately 300,000 users reportedly took the test, but the application also collected information associated with their Facebook friends. The resulting dataset reportedly included profiles belonging to as many as 87 million people.

Facebook banned the application in 2015 for violating its platform policies and subsequently sought to have Cambridge Analytica delete the collected information. The scandal became public in 2018 and intensified concerns about how social media platforms handle personal data, obtain consent, and oversee third-party applications.

Cambridge Analytica announced in May 2018 that it was ceasing operations. The firm had also been involved in Donald Trump's 2016 presidential campaign, bringing additional public attention to the controversy over the use of personal data in political activities.

Previous Settlements and Regulatory Penalties

The latest ruling follows several major legal and regulatory actions concerning Facebook's privacy practices.

In 2019, the U.S. Federal Trade Commission imposed a $5 billion penalty on Facebook over allegations that the company undermined users' ability to control their privacy.

In December 2022, Meta agreed to pay $725 million to settle a class-action lawsuit alleging that Facebook improperly shared users' information with Cambridge Analytica.

The company also reached a separate settlement in August 2026 with nearly all U.S. states and territories, excluding New Mexico and Florida. That agreement reportedly involved $18 billion in payments over the following decade and commitments to implement stronger child-safety measures on Facebook and Instagram. The settlement also included $459 million for claims related to the Cambridge Analytica matter.

The New Mexico decision adds another substantial financial and legal development to Meta's history of privacy-related disputes. However, the company's planned appeal means the latest ruling may face further legal proceedings.

What the Ruling Means for Data Privacy

The case highlights the legal risks associated with how digital platforms communicate their privacy policies, manage user consent, and oversee third-party access to personal information.

Applications that collect data through social media platforms can expose information about people who never directly used those applications. The Cambridge Analytica controversy demonstrated how permissions granted by a relatively small number of users could result in the collection of data associated with a much larger population.

For technology companies, the case underscores the importance of clearly explaining data collection practices, enforcing restrictions on third-party applications, and ensuring that privacy commitments accurately reflect how user information is handled.

For users, it also reinforces the value of reviewing application permissions, limiting unnecessary data sharing, and understanding how information may be used beyond the service through which it was initially collected.

Meta Plans to Appeal

Meta chief legal officer C.J. Mahoney criticized the New Mexico court's decision and confirmed that the company intends to appeal.

The outcome of that appeal will determine how the ruling proceeds through the legal system. In the meantime, the case adds to the broader debate over corporate accountability, consumer privacy, and the responsibilities of social media platforms that collect and process personal information at scale.