New Mexico Meta Verdict: 43.9 Million Willful Violations and a $219 Billion Statutory Ceiling

The New Mexico Meta verdict returned in Santa Fe on Friday 25 September 2026 found that Facebook willfully violated the New Mexico Unfair Practices Act roughly 43.9 million times by misrepresenting how it collected, shared and protected residents' personal information. Because NMSA 1978, Section 57-12-11 allows a civil penalty of up to $5,000 for each willful violation, the arithmetic produces a theoretical ceiling of about $219.5 billion — but the jury did not award a dollar, and Judge Francis Mathew of the First Judicial District Court will decide what Meta Platforms, Inc. actually pays.

That distinction is doing almost all the work in this story, and most of the coverage has skipped past it. What a jury of New Mexicans delivered is a liability finding plus a multiplier. What the State now has to win is the penalty, against a defendant with every incentive to litigate the constitutional ceiling on aggregated statutory fines for the next several years.

What did the New Mexico jury decide in the Meta verdict?

The jury found that Meta, formerly Facebook, Inc., made false or misleading statements to New Mexico consumers about their ability to control their own data, about the company's handling of misinformation and hate speech, about whether community standards were enforced evenly, and about the investigation Facebook promised after the Cambridge Analytica scandal became public in 2018. It found those violations willful, which is the statutory gate to a civil penalty at all.

It did not find for the State on everything. Reuters reported that the jury rejected the State's claims concerning statements about Meta's efforts to remove harmful content from the platform — a partial defence verdict that will matter more on appeal than the headline number suggests, because it shows the jury discriminating between categories rather than rubber-stamping the State's theory.

The New Mexico Department of Justice describes it as the first state-led case of its kind to reach a jury verdict at trial, and the characterisation is defensible: other states resolved their Cambridge Analytica claims against Meta by negotiation rather than by verdict.

The case was filed in 2021 by then-Attorney General Hector Balderas and tried by the office of Attorney General Raúl Torrez. New Mexico declined to join the multistate resolution that other states reached with Meta over Cambridge Analytica, which is the only reason there was a trial at all. "For years, Facebook operated as if the rules that apply to everyone else didn't apply to them," Torrez said after the verdict. "Today, a jury of New Mexicans said otherwise." A Meta spokesperson, Alex Burgos, said the company disagreed with the verdict and would "continue to defend ourselves against efforts to distort our record."

How the Cambridge Analytica harvest reached New Mexico

The underlying facts have been public since 2018 and were largely uncontested at trial. A third-party personality quiz hosted on Facebook was taken by roughly 300,000 users. The app did not stop at those users: it harvested profile data belonging to their friends, reaching as many as 87 million Facebook profiles, of which about 70 million were in the United States and roughly 350,000 belonged to New Mexicans. That data reached Cambridge Analytica, the British political consultancy, which used it to build targeted political advertising during the 2016 United States election cycle.

What New Mexico put to the jury was not the harvest itself but what Facebook said about it, before and after. The State's case rested on public statements by Mark Zuckerberg, then-chief operating officer Sheryl Sandberg and other executives: that users controlled their own data; that community standards applied evenly, including to public figures; and that after the scandal broke the company would audit suspicious applications, ban developers who misused data and notify everyone affected. The jury found those representations willfully false or misleading in five categories. It took five years from filing to get the case in front of a jury.

The numbers, and why the published counts do not match

Practitioners reading secondary coverage this weekend will find three different tallies, and it is worth being precise about which is which before any of them is repeated in a brief.

Figure	Source	What it counts
43,899,725 willful violations	New Mexico Department of Justice press release	Aggregate violations of the Unfair Practices Act found by the jury
43,899,720 violations	Associated Press	The same aggregate, reported five lower
31 of 34 counts for the State	Source New Mexico	Questions on the verdict form resolved in the State's favour
26 of 29 statements misleading	Reuters	Challenged public statements the jury found deceptive
More than 18.1 million violations	New Mexico Political Report	The Cambridge Analytica category alone — the largest single bucket
Up to $5,000 per willful violation	NMSA 1978, Section 57-12-11	The statutory cap, not an award
About $219.5 billion	Multiple outlets	43.9 million multiplied by $5,000

The five-violation gap between the State's own count and the wire count is almost certainly a transcription artefact rather than a substantive dispute, but until the verdict form is on the public docket, the safer citation is "approximately 43.9 million." The count-versus-statement divergence is not a contradiction either: a verdict form in a case like this asks separately about each challenged representation, then asks the jury to find the number of consumers exposed, so "31 of 34" and "26 of 29" are counting different things at different stages. Anyone who writes that the jury "found 43.9 million separate lies" has misread the instrument. The violation count is a population multiplier applied to a much smaller set of statements — New Mexico's entire population is a little over two million people, and the State's theory reached essentially all of them repeatedly.

How much will Meta actually have to pay?

Nobody knows, and the honest range is very wide. Section 57-12-11 gives the court discretion to impose a penalty "not exceeding" $5,000 per violation on the attorney general's petition; it does not require the maximum, and it does not require any particular per-violation figure. The State has said it will ask for the maximum. It has also signalled that it wants non-monetary relief — an independent monitor and an order requiring Meta to correct its prior statements — which is frequently where a state enforcement action extracts value that a damages award cannot.

New Mexico's own recent history with this defendant is the best available guide. In March 2026, a different Santa Fe jury, in the State's child-safety case, assessed $375 million in civil penalties against Meta at the same $5,000 statutory maximum. In August 2026, Judge Bryan Biedscheid entered a final judgment of roughly $942 million in that case, adding a $567 million abatement fund on top of the penalties and ordering operational changes to Facebook and Instagram for New Mexico minors. Meta has said it will appeal that judgment.

So the State has already shown it can obtain the per-violation maximum from a New Mexico court. What it has not shown is that a court will apply that maximum across a violation count three orders of magnitude larger. $375 million at the statutory maximum implies a violation count in the order of 75,000. 43.9 million violations at the same rate is a different constitutional question entirely, and Judge Mathew will be asked to answer it.

The statute: willfulness is the gate, not the ceiling

Section 57-12-11 sits inside the Unfair Practices Act and is available only to the attorney general, on petition, in an action brought under Section 57-12-8. Its operative trigger is a finding that the defendant "willfully" used a practice the Act declares unlawful. New Mexico courts have treated willfulness as requiring a culpable mental state — the intentional doing of an act with knowledge that harm may result — rather than mere negligence or an inaccurate statement innocently made.

Two practical consequences follow. First, the willfulness findings are the real target on appeal: strip willfulness from a category and the penalty exposure for that category disappears, even though the underlying liability finding survives. Second, because the cap is a maximum and not a schedule, the penalty phase is an exercise in judicial discretion rather than arithmetic, and the factors a court weighs — the defendant's resources, the duration of the conduct, the harm caused, the deterrent value of the sanction — are the same factors that will be re-argued on appeal as proportionality.

Why this was not a class action and not an arbitration

This is the part of the story that should interest anyone who builds or attacks aggregate claims for a living.

New Mexico did not need a Class Action. It sued in its own sovereign capacity, in parens patriae, to enforce a state consumer protection statute. There was no Class Certification motion, no Rule 23 fight over Predominance or Ascertainability, no Class Notice programme, no Claims Administrator, no Objector, no fee petition contested by a rival plaintiffs' firm, and no opt-out mechanics. The State does not have to prove individual reliance by 2.1 million residents; it has to prove the practice, the willfulness and the exposure count.

Nor could the case be routed into arbitration. An Arbitration Agreement binds the parties who assented to it. A state attorney general enforcing a public statute is not a Facebook user and did not click "agree," so a consumer-facing Arbitration Clause, a Delegation Clause and a Class Action Waiver are all simply beside the point. This is the structural asymmetry that platform defendants have been slow to price: the contractual architecture that has proved extremely effective at dismantling private consumer aggregation — pushing claims into individual arbitration, and thereby into Mass Arbitration when the plaintiffs' bar responds at scale — does nothing at all against a sovereign plaintiff with a per-violation penalty statute.

The comparison the coverage is missing: $725 million and $29.43

The private version of this grievance already ran its course, and the contrast is the sharpest thing in the record.

	Private class action	New Mexico enforcement action
Case	In re Facebook, Inc., Consumer Privacy User Profile Litigation (N.D. Cal.)	State of New Mexico v. Meta Platforms, Inc. (1st Jud. Dist. Ct., Santa Fe Cty)
Aggregation device	Rule 23 Settlement Class	Parens patriae statutory enforcement
Claimant population	~250 million eligible U.S. users	~2.1 million New Mexicans
Resolution	$725 million settlement, final approval 10 October 2023	Liability verdict 25 September 2026; penalty to be set
Validated claims	~19 million	Not applicable
Per-person outcome	~$29.43 average payment	$0 to individuals; penalties payable to the State
Arbitration exposure	Live issue for platform terms generally	None — the State is not a contracting party
Appellate risk	Resolved by settlement	Substantial, on willfulness and proportionality

Read together, the two proceedings describe the same conduct producing $725 million nationally through the private channel and a nine-to-twelve-figure question mark from a single state of roughly two million people. Even a penalty set at one per cent of the statutory ceiling would exceed $2 billion, from a jurisdiction holding well under one per cent of Facebook's American user base. That is the number that will concentrate minds in forty-nine other attorney general offices this week.

The private channel's weakness was never the merits. It was the economics of distributing a Negative-Value Claim across a class the size of a continent: after fees and administration, a $725 million fund produced payments in the range of roughly $4 to $38, with an average near $29.43. A per-violation penalty statute does not have that problem, because it never tries to compensate anyone.

The constitutional ceiling on 43.9 million penalties

The serious fight ahead is not whether Meta violated the Unfair Practices Act. It is whether a penalty scaled to 43.9 million violations can survive review.

Aggregated statutory penalties have long attracted due process scrutiny when the total becomes untethered from any harm actually caused. Defendants in this position argue that a mechanically multiplied penalty is punitive in substance, and that the proportionality limits courts apply to Punitive Damages — the relationship between the sanction and the actual or potential harm, the reprehensibility of the conduct, and comparable civil sanctions — must constrain it. States answer that a legislature is entitled to fix a per-violation price for deceptive trade practices, that the cap already reflects a legislative judgment about proportionality, and that a court exercising discretion below the cap is doing precisely the individualised weighing due process requires.

Expect Judge Mathew to be pressed to set a per-violation figure low enough to be defensible and high enough to matter, and expect whatever he sets to be appealed. New Mexico Political Report's estimate of a two-to-three-year appellate timeline, with post-judgment interest accruing throughout, is a reasonable working assumption. The parallel appeal from the $942 million child-safety judgment will likely reach the appellate courts first and will shape the law that governs this one.

What happens next in the First Judicial District

Stage	Status	What to watch
Liability verdict	Returned 25 September 2026	The verdict form itself, once docketed, resolves the competing counts
Post-trial motions	Expected	Judgment notwithstanding the verdict and new-trial motions aimed at the willfulness findings
Penalty petition	State to petition under Section 57-12-11	Whether the State holds to $5,000 per violation or proposes a tiered figure
Non-monetary relief	Sought	An independent monitor and corrective statements; the child-safety judgment shows this court will order operational change
Final judgment	Not yet entered	The per-violation rate Judge Mathew selects is the number that matters
Appeal	Anticipated by Meta	Willfulness, the exposure-count methodology, and proportionality

What it means for state attorneys general, defence counsel and the plaintiffs' bar

For state attorneys general. New Mexico has now demonstrated the full sequence twice against the same defendant: try the case, obtain willfulness findings, obtain the statutory maximum from a jury, and convert the judgment into operational relief plus an abatement fund. Declining the multistate deal, which looked like an outlier decision in 2021, produced two verdicts and a $942 million judgment while the settling states took their share of a negotiated number. Offices weighing whether to join the next multistate resolution now have a concrete counterfactual to cite.

For platform and consumer-facing defendants. The contractual defences that dominate private consumer litigation are unavailable here, and the exposure is a function of user count multiplied by a statutory figure, not of provable harm. A defendant with tens of millions of users in a mid-sized state faces a theoretical penalty larger than its annual revenue in every state with a per-violation penalty statute. The practical implications are about statements, not terms of service: every public representation about data handling, content moderation and enforcement parity is a potential multiplicand, and the willfulness standard means internal documents about what the company knew when it made them are the whole ballgame.

For the plaintiffs' bar. This is a reminder that aggregate leverage now runs through at least three channels — Rule 23, Multidistrict Litigation (MDL) and mass arbitration on the private side, and state enforcement on the public side — and that they are not interchangeable. A parens patriae action recovers nothing for individual consumers and sits outside the Contingency Fee economics that drive private aggregation, but it develops a trial record, willfulness findings and appellate law that private claimants can use. Firms retained as outside counsel by state attorneys general are increasingly the bridge between the two.

For everyone drafting. Nothing in a consumer agreement closes this door. A Class Action Waiver and a Delegation Clause can strip a company's users of collective private remedies and still leave it exposed to a single state's penalty statute applied across its entire in-state user base. The two risks are not substitutes, and pricing only the first has, in New Mexico, proved expensive.

Frequently asked questions

Is the $219 billion figure a real penalty or just a theoretical maximum?

It is a theoretical maximum. It is the product of roughly 43.9 million violations and the $5,000 statutory cap in NMSA 1978, Section 57-12-11. The jury assessed no dollars. Judge Francis Mathew will set the penalty on the State's petition, and the statute permits any figure up to the cap.

How many violations did the jury find against Meta?

Approximately 43.9 million. The New Mexico Department of Justice put the figure at 43,899,725; the Associated Press reported 43,899,720. The Cambridge Analytica category accounted for more than 18.1 million of them.

How does this compare to the $725 million Facebook privacy class action settlement?

The private class action, In re Facebook, Inc., Consumer Privacy User Profile Litigation, resolved the same underlying conduct nationally for $725 million, paying roughly 19 million validated claimants an average of about $29.43 each. The New Mexico action pays individuals nothing; penalties run to the State, and the exposure from one state of about two million people dwarfs the national private settlement on paper.

Why was this case not a class action or sent to arbitration?

New Mexico sued as a sovereign enforcing its own consumer protection statute, so there was no class to certify and no Rule 23 machinery. A consumer Arbitration Agreement binds users who assented to it; it does not bind a state attorney general who never agreed to anything, which is why Meta's Arbitration Clause and Class Action Waiver had no application.

Can Meta appeal the New Mexico Meta verdict, and on what grounds?

Yes, after final judgment. The likely grounds are the sufficiency of the evidence supporting willfulness in each category, the methodology used to convert a set of challenged statements into a 43.9 million violation count, and the constitutional proportionality of any penalty derived from that count. Meta has already said it will appeal the separate $942 million child-safety judgment entered in August 2026.

What does this mean for other states?

Every state with a per-violation civil penalty provision in its consumer protection statute now has a tried template, a willingness-to-pay data point and an appellate record in progress. The strategic question for any attorney general is no longer whether the theory works at trial — in New Mexico, twice, it has — but whether the resulting number survives review.