Meta hit with $25B New Mexico penalty and $725M settlement

Meta faces a $25 billion penalty from New Mexico and a $725 million settlement in a federal class action. The twin blows tighten the financial pressure on a company that has long dodged accountability for its data‑handling failures.

The New Mexico Department of Justice issued a press release ordering the payment, while a separate court filing in San Francisco disclosed the $725 million deal. The settlement covers a proposed class of 250‑280 million U.S. Facebook users whose data were harvested between May 2007 and December 2022. The class period spans the entire lifespan of the platform’s early growth, the 2016 Cambridge Analytica scandal, and the subsequent FTC probe that forced a $5 billion payment in 2019¹².

The New Mexico Penalty

New Mexico’s attorney general announced the $25 billion judgment as part of a broader effort to hold Meta accountable for the Cambridge Analytica breach³¹⁴⁵. The press release frames the penalty as a punitive measure meant to deter future misuse of personal information⁶¹⁴⁵. While the exact legal theory was not detailed in the summary, the size of the judgment dwarfs any prior state‑level sanctions against a tech firm^7861452.

State officials argue that the penalty reflects the massive scale of harm inflicted on millions of residents⁷¹. By tying the judgment to the same data‑harvesting practices that fed political targeting in the 2016 election³¹⁴⁵, New Mexico signals that local regulators are willing to impose stakes that match the reach of the platform.

The Federal $725 Million Settlement

Meta agreed to pay $725 million to resolve a class‑action lawsuit alleging that third‑party apps, including Cambridge Analytica, accessed users’ personal data without consent. The settlement, the largest of its kind in a U.S. data‑privacy class action, still required no admission of wrongdoing from the company. Meta’s statement framed the deal as “in the best interest of our community and shareholders,” and promised to keep privacy at the forefront of its services.

Lead plaintiffs Derek Loeser and Lesley Weaver called the deal “historic” and said it would provide “meaningful relief” to the class. Yet the practical payout per user appears negligible. Janis Wong, a privacy researcher at the Alan Turing Institute, estimated that a claim would net only two or three dollars per person if every class member pursued compensation. The next hearing is scheduled for 2 March 2023, when a federal judge will decide whether to certify the settlement.

What the Numbers Mean for Users

For the average Facebook user, the $725 million figure reads like a headline rather than a windfall. Even if the settlement is approved, the per‑person distribution will be dwarfed by the $25 billion New Mexico judgment, which, if enforceable, could translate into a far larger collective burden. However, the mechanics of collecting a state‑level penalty from a multinational corporation are complex, and the judgment may ultimately be reduced or appealed⁷³⁶¹⁵².

James Ball, a tech author, noted that the settlement is “less than a tenth of what Meta spent on its efforts to create the metaverse last year alone.” In other words, the cost is a drop in the bucket for a company with billions in annual revenue⁵. Still, the settlement serves as a warning that data‑privacy missteps can carry a price tag that is hard to ignore, especially when regulators begin to coordinate across state and federal lines.

A Growing Wave of Enforcement

Meta’s $5 billion FTC settlement in 2019 marked the first major federal penalty for privacy violations¹². The new $725 million deal and the New Mexico judgment suggest that enforcement is no longer a one‑off event. In the United Kingdom, a competition‑law expert has already filed a multi‑billion‑dollar class action covering the same Cambridge Analytica period, and that case is slated for review by the Competition Appeal Tribunal in the new year.

The pattern points to a regulatory environment that is increasingly comfortable imposing massive financial penalties. State attorneys general, federal agencies, and foreign competition authorities are all converging on the same set of practices: lax data controls, opaque third‑party access, and insufficient user consent. Meta’s public claim that it has “revamped” its privacy approach over the past three years now sits alongside a string of legal outcomes that demand more than rhetoric.

What to Watch

The next steps will hinge on two key decisions. First, a federal judge in San Francisco will either certify or reject the $725 million settlement in the coming weeks. Second, New Mexico’s $25 billion judgment will likely face appeals that could reshape its enforceability⁷³⁶¹⁵². Observers should also keep an eye on the UK competition case, which could set a precedent for cross‑border class actions. Together, these threads will determine whether Meta’s financial exposure becomes a one‑time hit or the opening move in a broader reckoning for the social‑media giant’s data practices.