New Mexico Ordered Meta to Pay $25 Billion
A New Mexico judge ordered Meta to pay $25 billion this week after a jury found the company systematically misled Facebook users about their privacy. It is one of the largest corporate penalties in US history, and it lands just as Meta’s legal bills are piling up faster than its AI ambitions.
What happened
On Wednesday, state district court Judge Francis Mathew in Santa Fe set the penalty at $25 billion, ending the penalty phase of a case New Mexico filed in 2021 in the wake of the Cambridge Analytica revelations. The jury had already found Meta guilty of 43,899,725 willful violations of the state’s Unfair Practices Act, spread across 26 public statements by Mark Zuckerberg, Sheryl Sandberg, and other company leaders from May 2010 to August 2021.
The math behind the number is striking. New Mexico law allows up to $5,000 per violation. Mathew calculated that a penalty of $219.5 billion was technically warranted, then reduced it to $25 billion, about eleven percent of the theoretical maximum. The state had sought up to $40 billion.
Why the penalty is so big
The case did not argue that Cambridge Analytica alone was the crime. It argued that Meta’s deception was the crime. The state accused Meta of lying to Facebook users in New Mexico about who had access to their data, and of misleading consumers about how the company handles hate speech and misinformation. The company knew third parties had broad access to users’ personal data and tolerated harmful content when it served the bottom line, the state said.
Mathew’s order did not mince words: “Facebook’s wrongdoing, over the course of years and systematically broadcast to the public, goes to the heart of Facebook’s core business practices.” A “coherent strategy designed to mislead the public,” he called it.
By law, the money goes to New Mexico’s public schools. The judgment also accrues 15 percent annual interest until Meta pays it, which adds roughly $3.75 billion a year to the bill while the appeals play out.
This is not Meta’s only legal bill
The $25 billion sits on top of an already staggering legal tab. This week Meta reported a $9.89 billion legal charge in its third-quarter results, halving its operating profit. That charge covers a different case: the 52-state attorney general settlement over teen mental health, which could cost Meta up to $18.59 billion in total.
Back in August, Meta reached a $17.1 billion multistate settlement resolving states’ claims about teen safety, and six states settled their own Cambridge Analytica claims for $459.2 million as part of that package. The previous record for a Cambridge Analytica penalty was the FTC’s $5 billion fine in 2019. New Mexico just multiplied that by five.
Add it up and Meta’s legal exposure is approaching the scale of its AI capital spending. Yesterday’s post on this site covered Meta’s new Class C stock, invented specifically to fund its AI build without diluting Zuckerberg’s control. Now there is a second tax on the AI build: the courts.
Meta’s defense: a tax on speech
Meta chief legal officer C.J. Mahoney said the company is confident it will win on appeal. His framing was pointed: the ruling “makes it all but impossible to do business in the state of New Mexico” and “seeks to impose a tax on speech to enforce new rules for what people can say online.”
That framing is the appeal’s whole strategy. Meta will argue the case conflates privacy violations with content-moderation decisions, and that penalizing the company for how it describes its policies is a speech issue, not a consumer-protection issue. New Mexico’s attorney general Raúl Torrez called the penalty one of the largest against a corporation in US history and stood by the enforcement.
The appeal will take years. The 15 percent interest means every year of delay costs Meta $3.75 billion more, unless the judgment is stayed or reduced. That clock is its own form of pressure.
Why state attorneys general are the new regulators
The bigger story here is who is doing the regulating. Congress has not passed a federal AI or privacy law. The FTC has opened investigative demands into OpenAI and Anthropic, but its biggest tool remains consumer-protection law, the same law New Mexico used.
State attorneys general have figured out that they do not need Washington. The 52-state teen-safety settlement showed what coordination looks like. This case shows what a single state can do with a jury and a per-violation penalty statute. Six states settled their Cambridge Analytica claims in August; New Mexico refused and took it to trial. Now other states have a template, and a verdict, to point to.
The pattern is spreading. When the FTC sent civil investigative demands to OpenAI and Anthropic last week, it used Section 5 consumer-protection authority, not new AI legislation. The era of self-reported safety is giving way to an era where ordinary fraud and deception law does the work. That is harder to lobby against than a new bill, and harder to predict.
What it means for the industry and builders
For the AI industry, the lesson is about the compliance surface. The FTC demands to OpenAI and Anthropic last week were about agent safety incidents. This verdict is about statements executives made a decade ago. The enforcement window is wide, and the statements a company makes today about its AI safety, its privacy controls, and its content policies are the exhibits of a future case.
For builders, three things matter. First, marketing claims about AI products are legal claims; the New Mexico jury counted 26 public statements as violations. Second, per-violation penalties turn small deceptions into existential numbers at scale, which is exactly what platform-scale products do. Third, the states are not waiting for a federal framework, so the compliance surface is now fifty different statutes, not one.
What to watch next
The appeal is the immediate question. Meta has deep pockets and a strong appellate team, and a $25 billion judgment will be tested on every available ground, including whether per-violation penalties of this scale are constitutional. Watch whether other states that settled in August regret taking the smaller number. And watch the interest clock: $3.75 billion a year is an argument for settling that gets louder every quarter.
The Cambridge Analytica story was supposed to end with a $5 billion FTC fine in 2019. Seven years later, a state judge multiplied it by five and sent the money to the schools. The privacy era is not over. It just moved to the states.
Sources
Reuters, October 21, 2026; CNN, October 21, 2026; The Times, October 21, 2026; Korea Herald, October 22, 2026; The Hindu BusinessLine (Reuters), updated October 22, 2026.
Related reading
More from Policy
All in topicSweden Blocked ChatGPT and Claude on Government PCs
From today, Monday, October 26, 2026, staff at Sweden’s Government Offices can no longer open ChatGPT or Claude from their work computers. The browser versions of…
UK Creates the First AI Biosecurity Lab
Britain is creating a new institution for a risk that, until now, had no institution of its own. On October 24, 2026, the UK government announced…
The FTC Just Put OpenAI and Anthropic on Notice
On Wednesday, the Federal Trade Commission sent civil investigative demands to OpenAI and Anthropic, two companies whose models now shape how hundreds of millions of people…
Keep exploring