New Mexico jury rules Meta misled residents about Facebook privacy
A Santa Fe jury found Meta violated New Mexico’s Unfair Practices Act by misleading residents about Facebook privacy and content policies. The verdict could shape future consumer lawsuits over tech disclosures, data practices, and platform safety claims.
Flat vector illustration of Facebook privacy issues and Meta misled residents case, showing data sharing, privacy controls, and a jury ruling with legal and consumer protection symbols.
A New Mexico jury on September 25, 2026, found that Meta violated the state’s consumer protection law by misleading residents about Facebook’s privacy practices, data sharing, hate speech enforcement, and misinformation controls. The verdict came after a trial in Santa Fe over a lawsuit the state filed in 2021 in the fallout from the Cambridge Analytica scandal, with jurors concluding Meta’s conduct violated the New Mexico Unfair Practices Act.
According to Reuters, the jury found Meta liable after hearing claims that Facebook gave third-party apps broad access to user information, used privacy controls that were vague or confusing, and made misleading statements about how evenly it enforced platform rules. Reporting on the verdict describes findings tied to false and misleading statements about data privacy, misinformation, and hate speech, with penalties still left for the judge to determine.
What The Jury Found
The case centered on whether Facebook’s public statements to users in New Mexico crossed the line from corporate messaging into unlawful deception. New Mexico’s Department of Justice said jurors found Facebook committed 43,899,725 violations of the state law and that the conduct was willful, a finding that could matter significantly when the court later considers civil penalties under the jury verdict announced by the state attorney general.
Bloomberg Law reported that the verdict sheet asked jurors to evaluate dozens of specific statements by Meta, and the jury found liability on most of them. Those findings reportedly covered representations about data sharing, content moderation, and the company’s claimed efforts to police harmful content, as reflected in the trial over 34 challenged statements.
Meta has said it disagrees with the verdict and plans to continue defending itself. Coverage after the decision quotes the company as arguing that the challenged statements were taken out of context and that Facebook had publicly acknowledged imperfections in its privacy and moderation systems during the period at issue, according to post-verdict statements from Meta.
Why This Case Matters Beyond Cambridge Analytica
For many readers, Cambridge Analytica may feel like old news. The original scandal became public in 2018, when reports showed that a third-party app had harvested Facebook user data and that the information was later used for political profiling. But this trial was not simply about the historic data leak itself. It focused on what Meta told consumers afterward — and whether those statements were accurate.
That distinction matters. In general terms, consumer protection cases often turn less on whether a company experienced a failure and more on whether the company misrepresented the scope of that failure, the protections in place, or the options available to users. Here, New Mexico argued that users were given a misleading picture of who could access their information and how seriously Facebook policed hate speech and misinformation. The state’s framing appears in its description of how Facebook collected, protected, shared, and used personal information.
The verdict also stands out because New Mexico pursued the case even after broader nationwide settlements resolved many other claims tied to Cambridge Analytica. As several reports noted, New Mexico was unusual in continuing to litigate its own claims, a point highlighted in coverage discussing future liability related to the Cambridge Analytica privacy breach.
The Legal Framework Behind The Verdict
New Mexico’s Unfair Practices Act is a state consumer protection statute aimed at false, misleading, or unconscionable business practices. Cases under laws like this often do not require the kind of individualized proof that appears in a personal injury lawsuit. Instead, the central question is often whether statements made to consumers were deceptive in a legally meaningful way.
That helps explain why this verdict could echo beyond one state. If courts and juries become more receptive to the argument that vague privacy promises, selective disclosures, or overstated content-safety claims can violate consumer protection laws, tech companies may face more litigation built around public statements rather than just underlying technical conduct.
This may be especially important in cases involving user dashboards, privacy controls, help-center language, community standards pages, or statements from executives after a public scandal. A company’s words can become the case.
Potential Penalties And What Comes Next
The jury decided liability, but the amount Meta may ultimately owe has not yet been set. The New Mexico Department of Justice has described the verdict as exposing Meta to potentially enormous penalties because each violation could carry a statutory amount under the consumer protection law’s civil penalty structure.
That does not automatically mean the final judgment will match the largest headline estimates. In cases involving massive per-violation counts, post-trial motions, penalty hearings, constitutional arguments, and appeals often shape the real-world number. In other words, the liability finding is a major event, but the money phase may become its own legal battle.
There is also a practical question about appellate review. Meta may argue that some statements were non-actionable opinion, that context mattered, or that the state stretched the statute too far. The company could also challenge how violations were counted. Some people following the case may want to watch the court’s next steps on penalties and any subsequent appeal before drawing firm conclusions about the ultimate financial exposure.
What This May Mean For Consumers And Businesses
For consumers, the verdict may reinforce a broader idea: privacy litigation is no longer limited to secret data collection or behind-the-scenes app permissions. It increasingly includes what platforms say about user control, safety, and enforcement. If a company tells users it treats everyone equally under a policy, investigates bad actors, or gives people meaningful control over data, those statements may later be examined line by line in court.
For businesses, especially tech platforms, this ruling may add pressure to align product design, public messaging, and internal practices more closely. A privacy setting described as simple or protective may attract legal scrutiny if users could reasonably see it as confusing. A moderation policy described as universal may draw attention if internal exceptions exist for certain accounts or categories of speech.
And for state attorneys general, the case may serve as a roadmap. The New Mexico verdict suggests that state consumer protection laws can become powerful tools for going after major platforms without waiting for federal regulators to take the lead.
What Affected Parties May Want To Consider
People who believe their personal data was mishandled often wonder whether a headline verdict automatically creates an individual claim. In many situations, the answer is more complicated. A state enforcement action can influence later private litigation, settlement talks, and public expectations, but it does not always translate directly into individual compensation.
Businesses facing allegations about online disclosures may also be thinking about exposure far beyond New Mexico. Consumer protection statutes exist nationwide, and plaintiffs’ lawyers often track verdicts like this for arguments that may carry into other courts.
For individuals, advertisers, app developers, or companies dealing with privacy-related disputes, an attorney might help evaluate how public statements, user disclosures, archived policy pages, and internal communications fit into the bigger picture. In fast-moving technology cases, documented evidence often matters as much as the technical facts themselves.
If you're facing legal challenges, ReferU.AI analyzes billions of court records to match you with attorneys who've successfully represented cases just like yours.