A New Mexico jury on September 25, 2026, found Facebook liable for deceiving users about its handling of privacy protections tied to the Cambridge Analytica data breach, a landmark decision that may lead to significant financial penalties for the company. Attorneys for the state requested the maximum penalty of $5,000 per violation as the extent of Facebook’s data misuse came under judicial review in Santa Fe.
What Happened
The legal battle revolved around Facebook’s failure to protect data from a third-party personality quiz that harvested personal information from approximately 87 million user profiles. This data was subsequently sold to Cambridge Analytica, a political consulting firm known for its role in President Trump’s 2016 campaign advertising strategy. After a two-week trial, the jury found Facebook deceptive in not only allowing this massive breach but also misleading the public about its internal investigations into data brokers following the scandal.
Jurors concluded that Facebook’s actions impacted New Mexico’s population of over two million people. The company was found liable for more than two million violations, with the judge now tasked to decide the precise financial penalties.
Key Facts
The court’s findings included:
- Facebook’s data breach involved roughly 87 million profiles affected by the personality quiz app data harvesting.
- More than two million privacy violations were identified by the jury in the state of New Mexico.
- The state has requested penalties of up to $5,000 per violation, potentially amounting to billions in fines.
- Meta (Facebook’s parent company) previously agreed to an $18 billion multistate settlement addressing child safety, excluding New Mexico’s claims on Cambridge Analytica.
- New Mexico secured earlier legal judgments totaling $942 million against Meta related to safety protections for minors.
What This Means
This verdict underscores growing legal and regulatory scrutiny over how major tech companies manage user data and privacy protections. For consumers, it highlights the ongoing risks of personal information misuse on social media platforms despite corporate promises for security. The ruling in New Mexico, distinct from other states that settled with Meta, signals a willingness among some jurisdictions to enforce accountability more rigorously.
From a business perspective, Facebook and its parent Meta face not only potential financial liability but also pressure to enhance transparency and compliance related to data privacy. This case may encourage stricter oversight in other states and increase demands for improvements in how tech giants govern user data, potentially raising operational costs and influencing market behavior across the industry.
For the broader market, such rulings can affect investor confidence, regulatory environments, and the relationship between technology companies and governments on privacy standards, with implications extending beyond New Mexico.
Background
The Cambridge Analytica scandal erupted in 2018, revealing that political consulting firm Cambridge Analytica improperly collected Facebook user data for targeted political advertising. While Meta settled with most states over child safety issues earlier this year, New Mexico stood alone in continuing to pursue claims tied directly to this historic privacy breach. The state’s Attorney General, Raúl Torrez, has emphasized that this verdict is a warning to technology companies regarding honesty about data use.
What Remains Unclear
The exact financial penalties Facebook will face remain to be determined by the judge, including how maximum per-violation fines will be applied. Meta disputes the verdict and plans to appeal, maintaining it managed platforms to protect both free speech and user data. Details on how this ruling will shape forthcoming regulatory measures or Meta’s operational adjustments are still pending.
Sources
This article is based on reporting and publicly available information from the following source:
Read more Digital Policy stories on Goka World News.