# Meta Faces Historic $25 Billion Fine in New Mexico Over Cambridge Analytica Fallout **Meta**, the parent company of **Facebook**, has been ordered to pay a colossal $25 billion in fines by a New Mexico court. The penalty addresses long-standing data privacy violations linked to the infamous **Cambridge Analytica** scandal, which first surfaced nearly a decade ago. ## A Decade of Deception Comes to a Head Last September, a jury determined that **Meta** had violated New Mexico’s unfair practices law an astonishing 43 million times. Each violation carried a potential civil penalty of up to $5,000. While the initial award was set at $220 billion, State District Court Judge **Francis Mathew** ultimately reduced the fine to $25 billion, with an additional 15% annual interest accruing until paid. The case centers on **Facebook**'s unauthorized sharing of up to 87 million users' data with **Cambridge Analytica**, a British political consulting firm. This data was subsequently used to construct psychological profiles of voters, facilitating targeted advertising, notably during the 2016 U.S. presidential election. ## Unpacking the Court's Findings New Mexico’s litigation, spearheaded by Attorney General **Raúl Torrez**, scrutinized **Facebook**'s public statements about its data practices and its efforts to combat misinformation and hate speech in the wake of the scandal. Judge Mathew's filing meticulously detailed the severity of **Meta**'s actions. "The scale, duration, repetition, breadth, and willfulness of the violations, together with the evidence concerning Facebook's internal knowledge and practices… constitute substantial aggravating circumstances," Judge Mathew wrote. Crucially, the court highlighted that senior **Facebook** leadership, including CEO **Mark Zuckerberg** and then-COO **Sheryl Sandberg**, orchestrated a calculated strategy to mislead consumers. This included creating a "song sheet" to coordinate their public relations response.  ## Internal Knowledge vs. Public Promises The filing further revealed that **Facebook** continued to make public representations about users' data control, third-party data misuse, misinformation, and hate speech, even while internal employees and researchers recognized that the company could not fulfill these promises. **Zuckerberg** was reportedly aware of this deception. **Facebook** exploited the fact that users could not verify its data access infrastructure and enforcement protocols. Moreover, the company failed to deliver on its promise of a "comprehensive" investigation after the scandal broke. This failure was largely attributed to **Facebook**'s poor record-keeping and its inability to properly vet third-party developers granted access to user data. Judge Mathew concluded that pressure from senior leadership to minimize costs, weak enforcement mechanisms, flawed investigative techniques, and a reluctance to set precedents for future probes led **Facebook** to implement an "willfully ineffective" App Developer Investigation. ## Meta's Response and Broader Implications **Meta**'s Chief Legal Officer, **C.J. Mahoney**, criticized the ruling, stating that **Torrez**'s approach "makes it all but impossible to do business in the state of New Mexico" and attempts to "impose a tax on speech." **Meta** has announced its intention to appeal the decision. This isn't **Meta**'s first legal setback in New Mexico. In March, **Torrez** secured $375 million in damages after a jury found the company violated state law regarding children's online safety practices. The company has also faced other significant penalties related to **Cambridge Analytica**, including a $459 million fine as part of a larger $17 billion settlement with various state attorneys general and a $725 million class-action lawsuit settlement in 2022. Digital freedom advocates are applauding the increasing momentum of states in holding tech giants accountable for data privacy violations. **Eric Null**, Director of the Privacy and Data Project at the **Center for Democracy and Technology**, emphasized the clear message from these actions: "The message from these state actions is evident: companies must be accurate and clear about how they process and treat data. If companies don’t improve their practices, states should ratchet up the pressure by continuing to hold companies accountable under current law and updating their privacy statutes to prevent such harms from happening in the first place."