A jury has found Facebook responsible for tens of millions of privacy and content violations, and the company could face a bill measured in the hundreds of billions of dollars. The verdict, reached on September 25, centers on statements Facebook made about user control, content moderation, and its handling of the Cambridge Analytica scandal.
New Mexico’s Unfair Practices Act was at the heart of the case. The jury concluded that Facebook violated the law 43,899,725 times. Each violation carries a penalty of up to $5,000, which puts the maximum theoretical exposure at over $219 billion. That number is a ceiling, not a bill. A judge will decide the actual amount later.
The verdict counts
The verdict covers three main categories of statements:
- Assurances about user control over personal information and sharing with third parties.
- Claims about misinformation, hate speech, and the consistent application of platform rules.
- Responses to the Cambridge Analytica scandal.
Each of those statements was judged to be misleading. The count of 43 million violations reflects how often Facebook repeated each claim across its operations.
The Cambridge Analytica scandal involved personal information harvested from as many as 87 million Facebook users via a third-party app. Facebook users began receiving payments from a separate $725 million privacy settlement in September 2025.
Meta, the parent company behind Facebook, disputes the verdict. A Meta spokesperson said the company would continue defending itself “against efforts to distort our record.” Meta’s lawyers argued the state took statements out of context during the trial.
What Meta denies
Meta denied selling users’ information during the case. The company’s position throughout has been that its statements were accurate in context, even if they sounded misleading out of context.
The verdict does not settle the underlying dispute. It determines responsibility. The penalty amount remains open. Meta has said it will continue defending itself against efforts to distort its record.
The stakes beyond this case
This verdict comes on the heels of a separate settlement. Meta agreed to a roughly $18 billion settlement over teen safety, announced in August. That deal covered allegations that Facebook exposed children to harmful content and allowed teens to be tracked online.
The two cases are separate. The teen safety settlement resolved one set of claims, while the New Mexico verdict addresses a different set of statements. Both involve Meta’s representations about how it handles user data and platform rules.
The verdict also follows a recent incident involving Facebook’s Muse AI. The AI tool shared a YouTuber’s home address with Marketplace buyers. The creator explained he had selected a permission setting allowing messages with his address but expected further approval before offers were accepted.
That incident shows how automated systems can bypass user expectations even when permissions are set. The verdict, however, does not directly address AI behavior. It focuses on statements made by the company, not actions taken by its tools.
How the penalty gets set
The $219 billion figure is a mathematical ceiling, not a prediction. The judge will set the actual penalty after considering several factors, including the nature of the violations and the company’s history.
The verdict does not specify which statements triggered which violations. It simply counted the total. That means the judge will have to parse the evidence to determine the appropriate amount.
Meta has not said whether it will appeal the verdict. Appeals in these cases can take years to resolve, and the company has signaled it will defend itself against what it calls distortions of its record.
What this means for users
For ordinary Facebook users, the immediate effect is unclear. The verdict does not change the terms of service or the privacy settings available to individuals.
What it does do is reinforce a principle: companies cannot promise transparency and control over user data and then fail to deliver. When they do, they face consequences.
The verdict also signals that states are willing to hold social media companies accountable for what they say publicly. New Mexico is not the first state to pursue Facebook over its statements, and it is unlikely to be the last.
“against efforts to distort our record”
That line from the Meta spokesperson captures the company’s posture. It is not apologizing. It is fighting back.
The paper’s view
Clay Tribune believes platforms should be held accountable for their privacy promises. A company that tells users they control their data should be held to that standard. A company that says it moderates content consistently should be judged on that basis.
The scale of the potential fine is extreme. $219 billion is a number that strains reason. But the principle is sound.
Meta’s argument that statements were taken out of context is a fair one. Context matters. But the jury found the statements misleading regardless of context, and the company has not disputed the verdict on that ground.
The verdict sends a clear message: Facebook cannot keep making promises it does not keep and expect nothing to happen.
The final bill has not been set. The judge will decide that later. Until then, Meta faces an open question: how much will this cost?
The answer will depend on the judge’s view of the evidence and the company’s arguments. Meta has said it will keep defending itself.
For now, the verdict stands. Facebook has been found responsible for 43 million violations. The penalty is pending. And the company that built the world’s largest social network is facing one of the largest legal bills in corporate history.
Where the paper stands
The paper backs the verdict and the right of users to hold platforms accountable for broken promises, while opposing any move toward licensing or regulation that would give the biggest firms an unbreakable moat against smaller rivals. The New Mexico verdict rests on statements made by Facebook, not on the behavior of its automated systems, and it rightly holds the company to its own promises. The potential penalty of $219 billion is extraordinary, but the principle is sound: a company that tells users they control their data should be held to that standard.
The danger is not the technology itself but the concentration of power around it. Big tech firms asking for licensing and compliance regimes are building a moat, not a safeguard. Narrow rules against direct harm, such as requiring companies to disclose safety failures they hid, make sense. Broad rules that hand the market to the incumbents do not. Facebook’s assurances about user control, content moderation, and the Cambridge Analytica scandal were judged misleading, and the company should face the consequences of that judgment.
The final bill has not been set. A judge will decide the amount later, and Meta has signaled it will keep defending itself against what it calls distortions of its record. Appeals in these cases can take years to resolve. For ordinary users, the verdict does not change the terms of service or privacy settings. The principle it reinforces is worth keeping in mind: companies cannot promise transparency and control over user data and then fail to deliver. When they do, they face consequences.
Source material: “Facebook could owe billions after jury finds platform responsible for 43 million privacy & content violations,” Dexerto.
Get the Notebook.
The day's best stories and every fresh verdict, in plain English, in your inbox by seven. One email a day, no more.