On October 21, a New Mexico judge ordered Meta to pay $25 billion, one of the largest judgments of its kind against a tech company. The case isn't about a new hack. It's about what Facebook told people about their privacy, and whether that matched reality.
Where this started
The story goes back to Cambridge Analytica, the political consultancy that obtained data on as many as 87 million Facebook users through a third-party app. New Mexico sued Meta in 2021, arguing the company misled people about how much control they had over their personal information.
A jury agreed, finding Meta liable under New Mexico's consumer-protection law. The state counted tens of millions of individual violations, and Judge Francis Mathew set the penalty at $25 billion after weighing a potentially much larger amount allowed by law.
Ordered to pay is not the same as paid
Meta disputes the decision and says it plans to appeal. Its SEC filing acknowledges the $25 billion penalty and possible appeal-related costs. Appeals could change the amount, the timing, or whether it gets paid at all. So for now, the accurate way to put it is that Meta has been ordered to pay.
Why it matters beyond Meta
Privacy promises don't expire. Something a company told users years ago can still turn into a bill today. Every app that collects personal data now has a fresh reason to make sure its privacy wording matches what its systems actually do.
Get stories like this in your inbox every week. Subscribe to The Week in Perspective.
Source: Meta SEC filing