AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
New Mexico’s Cambridge Analytica Case
Coverage from Courthouse News Service, The Record, and others
The Cambridge Analytica scandal involved Facebook profile information collected through third-party personality quiz apps and transferred to Cambridge Analytica for political targeting during the 2016 U.
S. election. New Mexico’s case against Meta examines the company’s handling and disclosure of that data, including allegations that users were not adequately protected or informed. The litigation also addresses Meta’s safeguards, consumer-protection liability, penalties, and remedies, making it a significant case about platform privacy and corporate accountability.
If you read one thing
It connects the jury’s privacy-liability finding to the record $25 billion judgment and the unresolved appeal.
Latest development
It clarifies that the judgment does not specify product or compliance changes, an important distinction for assessing its practical impact.
The local angle
It explains why New Mexico remained the sole state pursuing the Cambridge Analytica-related case after other states settled.
Jury liability for privacy deception
The jury found Meta liable for misleading consumers about Facebook’s privacy practices and handling of third-party apps. The finding—reported as roughly 43–44 million state-law violations—remains the basis of New Mexico’s case.
Record penalty ordered; appeal leaves outcome unsettled
A judge has ordered Meta to pay $25 billion following the jury’s findings. Meta plans to appeal, so the judgment is a major accountability outcome while its final financial effect remains subject to further proceedings.
New Mexico remains the state pursuing this case
After other states settled related claims, New Mexico continued pursuing Cambridge Analytica-related liability in court. The case has advanced to a judgment, while New Mexico’s distinct role in the litigation persists.
nearly 44 million violations
New Mexico Unfair Practices Act violations found by the jury
“A New Mexico jury on Friday found Facebook violated the law nearly 44 million times by lying to consumers about its data privacy practices.”
$5,000 civil penalties per violation
Maximum penalty under New Mexico's Unfair Practices Act
“The amount of damages the Meta-owned tech giant will ultimately pay will be determined by a judge in the coming weeks, but the verdict could cost Meta billions because each violation of New Mexico's Unfair Practices Act carries up to $5,000 in civil penalties.”
$25 billion dollars
judgment against Meta
“A New Mexico judge ordered Meta to pay $25 billion after a jury found 43 million violations of the state’s consumer protection law related to Facebook’s handling of the Cambridge Analytica scandal.”
43 million violations
jury-found violations of New Mexico’s consumer protection law
“A New Mexico judge ordered Meta to pay $25 billion after a jury found 43 million violations of the state’s consumer protection law related to Facebook’s handling of the Cambridge Analytica scandal.”
$5,000 dollars per violation
statutory maximum sought by prosecutors
“Prosecutors sought the statutory maximum of $5,000 per violation, which would have produced a judgment of about $215 billion.”
The judgment sets no specific privacy-practice changes
Beyond the $25 billion judgment already established, new reporting says the court has not specified product or privacy-practice changes Meta must make. The judgment’s practical remedies therefore remain unsettled.
Previously
A New Mexico jury found Facebook liable for misleading consumers about privacy protections and data practices tied to Cambridge Analytica. The case has moved to penalties and possible court-ordered changes, with Meta disputing the scale of the requested fines.
The judge has now set a $25 billion penalty, turning the pending penalty phase into a major judgment against Meta. Meta plans to appeal, and specific privacy-practice changes remain unsettled.
Meta now says it investigated suspicious applications and strengthened safeguards after the data exposure, adding a company-reported response to the case.