Meta Ordered to Pay $25B in New Mexico's Cambridge Analytica Case: What It Means for Users and Advertisers

On October 21, 2026, New Mexico District Judge Francis Mathew ordered Meta to pay a $25 billion civil penalty after a September jury found Facebook had misled users about their privacy, tied to the Cambridge Analytica scandal. The judge could have gone above $219 billion. Meta says it will appeal. For marketers, it is one more reason to rely less on third-party targeting.

What is the New Mexico v. Meta case actually about?

It is a consumer-protection case about what Facebook told people, not a data-breach case. Attorney General Raúl Torrez sued in 2021 under the state's Unfair Practices Act. The state claimed Facebook deceived users about privacy, about third-party access to their data, and about how it handled misinformation and hate speech, according to Tom's Guide.

The backstory is Cambridge Analytica:

• A personality quiz app called "thisisyourdigitallife" was installed by about 270,000 people and pulled in data on their friends as well, reaching roughly 87 million Facebook users worldwide, CP24 reported.
• The data was used to build voter profiles for political ad targeting around the 2016 U.S. election.
• Facebook learned of the data transfer in December 2015 but only disclosed it publicly in 2018, after a whistleblower came forward.

The jury did not side with the state on everything. According to the Associated Press, via WFTV, jurors rejected some claims, including that Facebook made false statements about removing harmful content such as COVID-19 misinformation. In his order the judge wrote, "Facebook promised users that they (the users) controlled their data. This was false."

How did the judge arrive at $25 billion?

The judge started from the jury's violation count and then set a penalty far below the statutory ceiling. Here is how the numbers break down:

1. Violation count: Jurors found 43,899,725 violations of the Unfair Practices Act, according to the New Mexico Department of Justice.
2. Ceiling: At up to $5,000 per violation, the maximum came to about $219 billion, as The Next Web reported.
3. The asks: The state wanted $35 billion to $40 billion. Meta argued for no more than $3.4 billion.
4. The result: $25 billion, or about $569 per violation by our own math.

Coverage differs on details. The Record describes about $220 billion as an initial award and reports 15% annual interest; others call the larger figure a maximum, and AP says only that interest accrues. The judgment is the authoritative source.

According to The Record, the judge cited substantial aggravating circumstances, meaning the scale, duration and willfulness of the conduct. He also found that senior leadership coordinated a strategy to mislead consumers.

What does Meta say, and will it appeal?

Yes. Meta says it will appeal and argues the penalty is unconstitutional. Chief Legal Officer C.J. Mahoney said the AG's approach "makes it all but impossible to do business in the state of New Mexico," as quoted by The Record. He also described the suit as an attempt to tax speech, and AP reported he expects Meta to win on appeal.

Meta's main arguments, as reported:

• The state never showed New Mexico consumers saw the statements or were harmed.
• Exposure to a statement should not automatically count as a separate violation, which challenges the 43.9 million figure.
• A penalty in the tens of billions would be unconstitutional.
• Its practices have improved; Meta says it now removes an estimated 99% of violating content.

We can't predict the appeal. AP notes collection could take years, and a lower violation count would shrink the penalty.

How does this compare with the FTC's $5 billion fine?

It is five times bigger, and it is the largest penalty ever imposed on Meta, according to AP. The comparison set:

• 2019: a $5 billion FTC penalty over Facebook's privacy practices.
• 2022: $725 million to settle a Cambridge Analytica class action.
• August 2026: a multistate settlement with most other states, reported at around $17 billion to $18 billion depending on the outlet. New Mexico did not join.
• Earlier in 2026: in separate New Mexico child-safety litigation, $375 million from a jury in March plus a $567 million court order in August.

Not everyone sees it as huge. Nidhi Hegde of the American Economic Liberties Project told AP it is small for Meta and called for stronger laws. Villanova law professor Peter Ormerod put it at roughly $12,000 per New Mexico resident. Meta's shares rose about 2%, per AP.

What does the ruling mean for Facebook users?

Users will not get any money from this ruling. Under the New Mexico Constitution, consumer-protection penalties go to education funding. Torrez said it shows "no corporation is too powerful to be held accountable." Tom's Guide reports the state is also asking for an injunction against similar conduct.

Practical steps: review connected apps and ad settings, and remember privacy controls may not reveal every way your data is used.

What does it mean for advertisers and brand teams?

The ruling doesn't change Meta's ad products tomorrow, but it adds to a pattern: courts are pricing in the cost of opaque data flows. Targeting built on third-party data or loose consent language is getting costlier in legal and reputational terms. We saw a smaller version of the same dynamic in the Eiliko robot toy data exposure.

That pushes brands toward three things they control directly.

• First-party data with clear consent. CRM lists, logged-in experiences and opt-in programs where you can explain plainly what you collect and why.
• Creative that does the targeting work. When audience precision drops, the ad has to find its own audience. Clear hooks and recognizable brand assets matter more, and so does testing before you spend. Teams using neuro-marketing creative testing or similar pre-flight checks can find weak creative before it burns budget.
• Efficient budgets under uncertainty. If platform signal gets noisier, reallocating spend based on actual results matters more than ever. That is the problem budget optimization tools are built to address.

It is also worth checking partners. If creators or agencies use data practices you cannot verify, that risk can land on your brand. A creator audit is one way to see who you are actually working with.

None of this is legal advice. Talk to counsel about your own data practices.

FAQ

How much was Meta ordered to pay New Mexico?

$25 billion in civil penalties, ordered by District Judge Francis Mathew on October 21, 2026. Meta has said it will appeal.

Why wasn't the penalty $219 billion?

The roughly $219 billion figure was the statutory maximum, $5,000 for each of 43,899,725 violations. The judge used his discretion and set $25 billion, between the state's $35 to $40 billion request and Meta's $3.4 billion proposal.

Will Facebook users get compensation?

No. Under New Mexico law, consumer-protection penalties go to education funding, not to individual users.

Is this related to the FTC's $5 billion fine?

Both stem from Cambridge Analytica-era privacy practices, but the FTC fine was a separate 2019 federal action. This state case is five times larger.

Could the amount change on appeal?

It could, though we can't predict how. Meta disputes how violations were counted and whether the penalty is constitutional. AP reports that collection may take years.

What should advertisers do now?

Check where your targeting data comes from and how consent was collected. Invest in first-party data, and lean on stronger creative and tighter budget allocation as third-party signals get less reliable.

Last updated October 23, 2026.