Analysis
A New Mexico jury found Facebook liable for more than 43 million violations of the state's Unfair Practices Act, according to Fortune, with state attorneys asking a judge to impose the statute's maximum $5,000-per-violation penalty -- arithmetic that would put Meta's exposure above $200 billion, before interest that would keep accruing if the company appeals.
The two-week trial in Santa Fe centered on the 2018 Cambridge Analytica scandal, in which a third-party personality quiz harvested data from roughly 87 million Facebook profiles and sold it to a political consulting firm that used it to build targeted political ads. New Mexico's attorney general filed the underlying lawsuit in 2021, arguing Facebook deceived users about how thoroughly the platform protected their data even after the breach became public.
This is not Meta's first bill for Cambridge Analytica. The company paid $5 billion to the FTC in 2019 over the same underlying conduct, per Wikipedia's summary of the settlement, and separately settled a shareholder derivative suit and a UK regulatory fine tied to the same breach. What's different here is the mechanism: New Mexico used a state consumer-protection statute rather than federal privacy law, and per-violation penalties compound differently -- 43 million violations at even a fraction of the statutory maximum dwarfs anything the FTC has extracted from a tech platform to date.
“## What Happens Between The Verdict And A Bill The jury's finding establishes liability -- it does not set the final penalty.”
What Happens Between The Verdict And A Bill
The jury's finding establishes liability -- it does not set the final penalty. A judge now has to decide how much of the $5,000-per-violation ceiling to actually impose, and Meta has said it plans to appeal, arguing the company has adapted its privacy policies since the lawsuit was filed and now removes 99% of content that violates its standards. A separate federal jury did not find Apple's infringement willful in a patent case decided the same week, and there's no indication yet whether this New Mexico jury made a comparable finding that could push the judge toward a harsher number.
The gap between a jury's liability finding and an eventual settlement is often enormous in cases like this, however -- Meta's own $5 billion FTC settlement followed public damages estimates that ran into the tens of billions before negotiation. Wall Street's initial reaction has been comparably muted: a $200 billion figure is a statutory ceiling calculated by multiplying violations by the maximum fine, not a number any court has actually ordered Meta to pay, and the real risk to Meta is reputational and regulatory precedent more than this specific bill, since markets tend to discount ceiling figures heavily until a judge rules.
What this changes regardless of the final number: state attorneys general now have a real jury verdict and a real violation count to point to the next time they bring a consumer-protection claim against a platform company, rather than relying on federal agencies to set the template. That's a meaningfully different legal exposure model for any company monetizing user data at Meta's scale, including AI labs now building products on similarly broad data-collection assumptions.
For Meta specifically, the timing lands awkwardly next to its own privacy repositioning -- the company has been running a "we care about privacy" messaging push around its Muse AI features even as this verdict was heading toward a jury. Whatever the eventual penalty, the verdict gives every state AG watching a concrete number to cite the next time they weigh a similar suit against any platform company sitting on this much user data.