
Meta Platforms has been ordered by a New Mexico state district judge to pay a record $25 billion in civil penalties for misleading users about its data privacy practices. The ruling follows a two-week trial centered on the company’s handling of user information, particularly in relation to the Cambridge Analytica scandal. The court found that the tech giant, which owns Facebook, Instagram, and WhatsApp, had engaged in deceptive practices for more than 11 years, affecting over 2.1 million residents in the state.
During the proceedings, New Mexico Attorney General Ra l Torrez argued that Meta consistently lied to the public regarding the security and sharing of personal data. While the state originally sought up to $40 billion in damages—and legal frameworks theoretically allowed for penalties exceeding $219 billion—the judge settled on the $25 billion figure to hold the corporation accountable for its willful violations. Torrez emphasized that the ruling serves as a historic message that no corporation is beyond the law, regardless of its global influence or financial power.
Meta has announced its intention to appeal the decision, with legal representatives describing the fine as a challenge to the company's ability to operate within New Mexico and labeling the judgment a "tax on free speech." Despite this massive legal setback, Meta continues to prioritize its long-term technological shift toward artificial intelligence. The company is currently projecting spending of up to $145 billion on AI infrastructure this year, even as it navigates various lawsuits regarding its practices and the safety of children on its platforms.
This ruling marks one of the largest financial penalties ever imposed on a technology company by a single state government. It follows a previous $18 billion settlement Meta reached with other states over similar privacy concerns. As regulatory pressure mounts globally, the New Mexico verdict underscores a growing trend of aggressive state-level enforcement against Big Tech firms over consumer protection and data security failures.