A New Mexico judge has ordered Meta to pay $25bn after finding the company intentionally misled consumers about who had access to their Facebook data, how it handled hate speech, and the safety of its platforms. Judge Francis Mathew determined that a penalty exceeding $219bn was warranted under state law but reduced the figure to $25bn — still likely the largest single-state verdict against a corporation in United States history. The case traces back to the Cambridge Analytica scandal, in which the now-defunct British political consulting firm harvested personal data from as many as 87 million Facebook users through a third-party app to generate targeted political ads during the 2016 election. New Mexico's attorney general sued Meta in 2021, arguing the company knew third parties had broad access to user data even as CEO Mark Zuckerberg publicly claimed in a 2010 Washington Post op-ed that Facebook did not sell user data. The state alleged Meta tolerated hate speech and harmful content when it benefitted the company's bottom line. Meta's chief legal officer CJ Mahoney called the ruling an effective tax on speech and said it makes doing business in New Mexico "all but impossible," signaling a confident appeal. The framing is telling: Meta is positioning the penalty not as a consequence of deception but as a regulatory overreach against expression — a rhetorical move designed to shift the terrain from consumer protection to First Amendment law. This is not an isolated action. Six other states previously settled Cambridge Analytica-related claims for $459m as part of a broader $17bn multistate settlement Meta reached in August over harms to teen mental health. New Mexico itself already won $942m in two earlier trials against Meta over claims of facilitating sexual exploitation of minors on Instagram and Facebook. A coalition of state attorneys general is currently in trial in California federal court over allegations that Meta engineered its platforms to be addictive to children, with 29 states pressing claims of illegal collection and use of children's data. The structural question is whether state-level enforcement can discipline a company with a market capitalization exceeding $1.5 trillion and annual revenues north of $130bn. Attorney General Raul Torrez framed the verdict as "an unambiguous message to Silicon Valley." But the American Economic Liberties Project offered a blunter assessment: $25bn is "a drop in the bucket for Meta" and the company is already rolling out Muse, an AI assistant encouraging users to entrust it with bank accounts and medical information — extending the same data-access model that created the liability in the first place. The judge's math is worth sitting with. State law warranted $219bn. The court imposed $25bn — roughly 11% of the calculated penalty. Even the reduced figure dwarfs every previous state-level corporate penalty. But Meta's appeal is near-certain, and the company's track record of reducing or restructuring fines through litigation is well established. The gap between the warranted penalty and the imposed penalty already represents a massive concession to corporate durability. What makes this case structurally significant is not the dollar amount but the judicial finding that Meta's deception was systematic, years-long, and central to its core business practices. That language — "goes to the heart of Facebook's core business practices" — is not about a single policy failure. It describes a business model built on the asymmetry between what users are told and what actually happens to their data. Whether the $25bn survives appeal matters less than whether that finding survives, because it underwrites every subsequent enforcement action against the same model.
