Meta ordered to pay $25 billion penalty in New Mexico case over alleged Facebook privacy deception

Meta has been hit with a $25 billion penalty after a New Mexico jury found the company misled Facebook users about privacy practices, according to a report published Wednesday. The case centers on allegations that Meta’s data-handling representations to users did not match what the company actually did, exposing users to risks related to third-party access and data use.

The judge’s order follows a jury finding in September that Meta misled users about their data privacy, the report said. The size of the penalty underscores the growing economic pressure on large social media platforms when courts conclude the companies’ disclosures or user-facing privacy statements were deceptive or materially misleading.

The ruling arrives in the long shadow of the Facebook-Cambridge Analytica scandal, a watershed moment that helped focus regulators and lawmakers on how social platforms collect, share, and monetize personal information. That history has also influenced how courts evaluate privacy-related claims, particularly when juries decide that companies did not communicate risks clearly to end users.

Meta, whose platforms include Facebook, Instagram, and WhatsApp, has repeatedly faced scrutiny over how user data is used for advertising and other business purposes. Privacy litigation and enforcement actions in the United States have increasingly treated transparency as a core requirement, rather than a secondary compliance issue, because user consent and user understanding are foundational to privacy laws and consumer protection frameworks.

Industry watchers have noted that major privacy settlements and court rulings can affect both operational practices and product messaging. Even when a platform’s underlying data flows are complex, the public-facing statements that users see often become the center of legal arguments. In cases like this one, what a company told users and what the company’s conduct allowed can carry decisive weight.

More broadly, the penalty highlights a legal risk that social platforms cannot fully manage with technical controls alone. Where courts conclude that user-facing descriptions were misleading, companies may face remedies that are designed to deter future behavior and provide leverage for compliance changes, regardless of whether similar issues are addressed elsewhere by regulators.

Still, important details about the specific conduct and legal theories underpinning the $25 billion figure were not fully laid out in the report. It was also not clear from the published account how the judge calculated the penalty amount or what additional remedies, if any, were included beyond the monetary penalty.

Going forward, attention is likely to focus on what steps Meta takes to adjust privacy communications and data-use practices, as well as what happens next in the legal process. Court timelines and appeal outcomes can determine whether the penalty remains in force, changes, or is ultimately overturned or reduced.