A jury in Santa Fe, New Mexico, has found Facebook liable for deceiving users about the privacy protections in place on the social media platform. The verdict, reached after a two-week trial, centers on accusations that the company misled the public regarding data handling practices connected to the Cambridge Analytica scandal. With liability established, the responsibility now shifts to the presiding judge to determine the financial penalties, with state attorneys requesting the maximum statutory fine of $5,000 per violation.
The trial examined a data breach stemming from a third-party personality quiz that harvested information from approximately 87 million user profiles. This data was subsequently sold to Cambridge Analytica, a now-defunct political consulting firm that used it to generate targeted advertisements. Clients of the firm included the 2016 presidential campaign for Donald Trump. Jurors concluded that Facebook’s failure to adequately protect user data impacted the entirety of New Mexico’s population, which exceeds two million people.
What the Left Is Saying
Progressive advocates and state prosecutors have long argued that major technology companies exploit regulatory gaps to maximize data collection without transparent consent. In this case, New Mexico prosecutors presented evidence that Facebook not only failed to protect data but also misled the public about ongoing investigations into data brokers after the initial scandal broke. The jury’s finding of over two million violations supports the argument that the company’s communication strategies were deceptive rather than merely negligent. This verdict aligns with a broader push for stricter enforcement of consumer protection laws against tech giants, particularly following recent rulings in New Mexico that ordered Meta to implement age-verification technology and time limits for minors.
What the Right Is Saying
Lawyers representing Facebook argued during closing arguments that the state’s evidence was outdated and lacked sufficient scope. They contended that despite having five years to gather material, New Mexico failed to identify more than one other instance of a data breach comparable to the one in question. Conservative commentators and industry advocates often view such lawsuits as examples of regulatory overreach, arguing that the complexities of digital data management are being penalized disproportionately. The defense’s position suggests that the liability finding ignores the broader context of the industry’s efforts to resolve privacy issues, including the $18 billion multistate settlement Meta agreed to in August, which aimed to release the company from future liability related to the Cambridge Analytica breach in most states.
What the Numbers Show
The jury found Facebook liable for more than two million violations, corresponding to the state’s population of over two million residents. State attorneys are seeking the maximum penalty of $5,000 per violation, which could result in a total financial judgment exceeding $10 billion. This figure stands alongside other recent legal outcomes for Meta in the state; earlier this year, New Mexico won judgments totaling $942 million from Meta in a separate two-phase trial concerning safety protections for minors. That prior case also resulted in a court order requiring Meta to implement new safeguards, including age-verification technology. The current case is unique because Meta’s August settlement with 49 other states included a release from future liability for the Cambridge Analytica breach, leaving New Mexico as the only state actively pursuing this specific claim.
The Bottom Line
The verdict establishes a significant legal precedent for holding social media platforms accountable for specific data privacy misrepresentations. While the total financial impact remains uncertain pending the judge’s decision on damages, the case highlights the divergence in regulatory approaches between states. Florida was the only other state to refuse the multistate settlement, citing concerns that it was not tough enough on Meta. This trial demonstrates that individual state attorneys general can still secure substantial judgments against major tech companies even after broad settlements are reached. The outcome will likely influence future litigation strategies regarding data privacy and the enforceability of user consent agreements in the digital sector.