Cybersecurity
Meta Ordered to Pay $25B in New Mexico Over Misleading Privacy and Content Moderation Claims
A New Mexico judge has ordered Meta to pay $25 billion in civil penalties after a jury found the company misled consumers regarding data access and content moderation. The ruling stems from the Cambridge Analytica fallout and broader violations of state consumer protection laws. Defenders should note the legal precedent for third-party API access risks and the scrutiny on platform transparency.
A New Mexico judge has issued a landmark ruling ordering Meta to pay $25 billion in civil penalties. This decision follows a jury verdict that found Facebook misled consumers about its data privacy practices, specifically regarding third-party access to user information, and its handling of hate speech and misinformation. The penalty is the result of a lawsuit filed by the New Mexico Attorney General in 2021, which alleged violations of the state’s Unfair Practices Act.
The ruling is significant not just for its financial magnitude, but for its legal interpretation of consumer protection in the digital age. The court determined that Facebook’s public assurances about data control did not align with the actual technical capabilities available to users. This disconnect between marketing claims and backend functionality formed the basis for the massive penalty, which Meta has stated it intends to appeal.
What Happened
The legal action centered on 26 specific misleading statements made by Facebook and its leadership between 2010 and 2018. The jury found that these statements, including high-profile comments by CEO Mark Zuckerberg, were false or deceptive. For instance, a 2010 statement claiming that Facebook did not share personal information with services users did not want was deemed misleading by the court.
The judge found that user controls over post visibility did not extend to third-party application access. Users believed that setting a post to "Friends Only" prevented external apps from accessing that data. However, the court determined that separate, often obscure settings governed API access, which many users were unaware of. This technical gap between user perception and system reality was central to the finding of consumer deception.
Who Is Affected
The primary affected party is the state of New Mexico and its residents, who were deemed the victims of these deceptive practices. The court also noted that other users who relied on Meta’s privacy assurances were indirectly harmed by the company’s misrepresentations. The judgment serves as a warning to other tech firms about the importance of transparent data practices and the potential legal consequences of misleading consumers. The state’s attorney general plans to pursue additional enforcement actions against similar violations across the country, emphasizing the growing scrutiny of social media platforms by state regulators. The case underscores the need for clearer user controls and better communication of privacy policies to protect consumers in the digital age.