acebook Privacy Lawsuit: New Mexico Jury Finds Meta Liable
A Facebook privacy lawsuit in New Mexico has produced a major new development, with a state jury finding Facebook liable for deceiving users about privacy protections on the social media platform.
The verdict, issued Friday after a two-week trial in Santa Fe, places the next major decision in the hands of the judge, who will determine how much Meta, Facebook’s parent company, must pay. Attorneys representing New Mexico are seeking the maximum civil penalty of $5,000 for each violation.
The case is connected to the Cambridge Analytica data scandal, which became one of the most prominent privacy controversies in Facebook’s history. The New Mexico case focuses on allegations that Facebook failed to adequately protect users from a third-party personality quiz that obtained information from approximately 87 million profiles.
The verdict does not immediately establish the final amount Meta will have to pay. The judge must determine the applicable penalties after the jury’s finding of liability.
Facebook Privacy Lawsuit Centers on 43 Million Violations
According to the Associated Press, the New Mexico jury found more than 43 million violations of the state’s consumer protection law.
That figure is central to the potential financial consequences of the case.
New Mexico attorneys have asked the court to impose the maximum penalty of $5,000 per violation. The ultimate amount, however, will depend on the judge’s determination rather than simply multiplying the requested maximum penalty by the number of violations.
The state Department of Justice described the verdict as a significant development for New Mexico consumers and said it holds one of the world’s largest technology companies accountable for its conduct.
Meta disputed the verdict.
“We disagree with the verdict and will continue to defend ourselves against efforts to distort our record,” Meta spokesperson Alex Burgos said in an email, according to AP.
That response reflects one of the central disagreements in the case: New Mexico prosecutors argued that Facebook’s privacy representations and handling of third-party applications violated state law, while Meta’s lawyers argued that the evidence relied too heavily on older events and did not reflect the company’s current privacy safeguards.
How the Facebook Privacy Lawsuit Began
The case goes back to the Cambridge Analytica scandal, which came to public attention in 2018.
At the center of the controversy was a personality quiz developed by third-party researcher Aleksandr Kogan. The application collected information from Facebook users and, under the platform’s rules at the time, was also able to access certain information connected to users’ Facebook friends.
The information was eventually obtained by Cambridge Analytica, a political consulting company.
AP reports that information from roughly 87 million Facebook profiles was harvested and provided to Cambridge Analytica, which used the data to develop targeted advertising capabilities.
The scandal triggered investigations and regulatory scrutiny in the United States and other countries.
New Mexico’s case eventually became one of the remaining legal actions focused specifically on the state’s consumer protection laws.
Why New Mexico Took the Case to Trial
The New Mexico lawsuit followed a broader effort by U.S. states to hold Meta accountable for problems involving privacy and the safety of users.
In 2026, 48 states reached a major settlement with Meta addressing child-safety concerns and privacy issues connected to the broader litigation. New Mexico continued its separate case concerning the Cambridge Analytica-related allegations.
As a result, New Mexico became the only state to take the data-breach claims connected to this particular dispute through a full trial.
The state’s approach meant prosecutors had an opportunity to present evidence directly to a jury rather than resolving the matter through a negotiated settlement.
The trial also allowed both sides to present competing interpretations of Facebook’s privacy practices before the jury.
Meta Says Its Privacy Protections Have Changed
Meta’s defense focused heavily on the passage of time.
The company argued that Facebook’s privacy protections and enforcement practices have changed significantly since the Cambridge Analytica scandal.
Meta attorney Dane Butswinkas told jurors that Facebook investigated suspicious third-party applications after the breach and took steps to restrict applications that violated its policies.
The company also argued that the state’s evidence was outdated.
According to AP, Meta’s attorneys pointed out that New Mexico had several years to investigate Facebook’s privacy practices but identified relatively few additional data breaches. The defense also emphasized that Facebook had implemented stronger safeguards following the Cambridge Analytica revelations.
The jury ultimately rejected Facebook’s position on liability in the case.
However, the company’s arguments could remain relevant as the court moves toward determining the financial consequences.
The Cambridge Analytica Connection
The Cambridge Analytica episode remains an important part of the Facebook privacy lawsuit because it illustrates how information collected through third-party applications could move beyond the expectations of ordinary users.
The data involved included Facebook profile information.
Cambridge Analytica used the information to support targeted advertising efforts. The company’s clients included Donald Trump’s 2016 presidential campaign, according to AP.
The political context is part of the historical record of the scandal, but the New Mexico trial centered on whether Facebook violated state consumer protection laws through its privacy representations and practices.
New Mexico prosecutors argued that Facebook had a responsibility to protect users from third-party applications that could collect and exploit personal information.
Meta disputed the state’s characterization of its business and privacy practices.
The company has also maintained that Facebook does not simply sell users’ personal information.
How Much Could Meta Pay?
The financial penalty is now one of the biggest unanswered questions.
New Mexico attorneys are seeking penalties of up to $5,000 per violation. With the jury identifying more than 43 million violations, the theoretical maximum could reach an extremely large figure if the maximum penalty were applied to every violation.
However, that calculation should not be treated as the final judgment.
The jury’s role was to determine liability and the number of violations under the relevant state law. The judge will determine the amount Meta ultimately owes.
The court may also consider the nature and circumstances of the violations when determining the appropriate penalties.
New Mexico has additionally sought an injunction intended to prevent future problems involving the protection of user data.
What Meta’s Defense Argued at Trial
Throughout the proceedings, Meta’s lawyers challenged the state’s interpretation of the evidence.
They argued that Facebook responded to the Cambridge Analytica revelations by investigating suspicious applications, banning problematic developers and improving its privacy systems.
The defense also emphasized that the Cambridge Analytica incident was an isolated event rather than evidence of an ongoing pattern of similar breaches.
AP reported that Meta’s lawyer told jurors that, despite years of investigation, the state had identified only a small number of additional data breaches.
The company also argued that its current policies are substantially different from those in place when the Cambridge Analytica incident occurred.
That distinction could become important in any further legal proceedings.
The Case Also Examined Facebook’s Content Policies
The trial was not limited to the Cambridge Analytica data incident.
Evidence presented during the proceedings also touched on Facebook’s handling of third-party applications, privacy representations and broader platform policies.
The trial included a video deposition from Meta CEO Mark Zuckerberg.
Prosecutors questioned Zuckerberg about a list of thousands of accounts that required additional review before content could be removed from Facebook or Instagram. The discussion included an email involving podcaster Joe Rogan’s accounts.
Zuckerberg said the company needed to exercise caution when removing sensitive material and described content moderation as a difficult problem.
These issues formed part of the broader evidence presented during the trial, although the central legal question remained whether Facebook violated New Mexico’s consumer protection law.
New Mexico Has Already Won Major Cases Against Meta
The latest verdict is not the first major legal development involving Meta in New Mexico this year.
Earlier in 2026, New Mexico secured judgments totaling $942 million against Meta in a separate case involving the company’s protections for minors on Facebook and Instagram.
A court also ordered Meta to implement additional safeguards, including age-verification technology and limits on how children and teenagers use its platforms. Those judgments are currently on hold while Meta appeals, according to AP.
The cases involve different allegations, but together they demonstrate the extent of New Mexico’s legal campaign against Meta.
The state has pursued litigation involving both privacy and child-safety issues rather than relying exclusively on nationwide settlements.
What Happens Next in the Facebook Privacy Lawsuit?
The immediate next step is the penalty phase.
The jury has already found Facebook liable. The judge must now determine the financial consequences associated with the violations identified by the jury.
Meta can also continue challenging the outcome through the legal process.
The final financial liability could therefore differ substantially from the maximum amount sought by New Mexico.
The outcome may also influence how future disputes involving consumer privacy laws are handled, particularly when regulators or state attorneys general argue that technology companies made misleading statements about data protection.
Why the Verdict Matters for Facebook Users
The case highlights a continuing challenge for social-media companies: users often provide personal information through platforms while relying on companies to explain how that information can be accessed, shared and used.
Third-party applications can create additional privacy risks because they may interact with platform data under permissions granted through the social network.
The Cambridge Analytica scandal demonstrated how information collected through one application could ultimately be used for purposes that were not obvious to the people who originally supplied the data.
The New Mexico verdict puts those issues back into focus nearly a decade after the scandal became public.
For Meta, the case also arrives as the company faces extensive legal scrutiny over the operation of Facebook and Instagram.
A Long-Running Privacy Dispute Reaches Another Milestone
The New Mexico verdict represents another chapter in a privacy dispute that began with events surrounding Cambridge Analytica nearly a decade ago.
The jury found that Facebook violated New Mexico consumer protection law through its handling and representations concerning user privacy. AP reports that the jury identified more than 43 million violations.
Meta continues to dispute the verdict and has argued that Facebook’s privacy protections have improved substantially since the events at the center of the case.
The amount the company will ultimately pay remains undecided.
For now, the case moves from the jury room to the judge, who must determine the appropriate penalties. The decision will determine the immediate financial consequences of the New Mexico lawsuit and could add another significant legal burden to Meta’s growing list of privacy and platform-safety disputes.
The broader issue remains the same one that emerged during the Cambridge Analytica scandal: how social-media companies protect personal information when outside developers and applications are given access to platform data.
That question has continued to shape technology regulation and litigation years after the original breach, and the latest New Mexico verdict ensures that the debate over Facebook’s privacy practices is far from finished.
