For years, the tech industry's penalty for abusing your private life has been a fine small enough to be treated as a business expense. In 2019 the Federal Trade Commission hit Facebook with a record $5 billion penalty over Cambridge Analytica. Wall Street cheered, and the stock rose. The two Democratic commissioners dissented, arguing the settlement was too weak and left the company's executives and business model largely untouched. They were right, and the market's reaction proved it.
So it matters that a New Mexico judge has now ordered Meta to pay $25 billion. That is five times the federal record. It is roughly what a company that cleared more than $60 billion in profit in 2024 might feel as a real loss rather than a rounding error. Whatever happens on appeal, this is the first number in years that a boardroom has to take seriously.
The case itself is not exotic. A jury found that Facebook made false or misleading statements about how much control users had over their data. That is a consumer-protection claim, the same kind a state brings against a car dealer who lies about a car's history. Meta's chief legal officer says the ruling would restrict online business and speech. That is the oldest dodge in the industry's playbook: if you call a lie about your product 'speech,' you can claim the First Amendment as a shield against accountability. Fraud has never been protected expression. Telling 87 million people they were in control while their data flowed to a political consulting firm is not a contribution to public debate.
The case also shows who has been doing the work. Washington took its $5 billion, declared victory, and went back to holding hearings where senators asked how Facebook makes money. Congress has still not passed a comprehensive federal privacy law. In that vacuum, a state attorney general from one of the poorest states in the country took the case to a Santa Fe jury and won. When New Mexico is the one enforcing the law against a trillion-dollar corporation, something is badly wrong at the federal level.
The Left should not cheer uncritically, though. A giant number is not the same as a collected judgment. Meta has said it will appeal, and appellate courts are often skeptical of punitive awards that dwarf the actual harm. If the number collapses, the company will have turned a jury verdict into a fundraising letter for tech exceptionalism. The Cambridge Analytica scandal was also oversold for years, including by Democrats eager to explain 2016 as a data-driven mind-control operation. The strongest case is not that a few psychographic ads swung an election. It is simpler and damning: Facebook sold trust it had not earned, and no one with power stopped it until the damage was done.
That is why this verdict should be defended on the right grounds. It is not an attack on the internet or on speech. It says that a company cannot build a fortune on a promise of control and then treat that promise as marketing copy. Ordinary people cannot audit a platform's data practices. They rely on what the company says, which is the whole point of laws against deception.
If the verdict survives, it should become a template. Other attorneys general should be able to bring similar cases without worrying that a federal settlement has already priced the problem. And if Congress wants to claim that states are overreaching, the remedy is obvious: pass a privacy law with real penalties, real enforcement and no safe harbor for executives. Until then, a New Mexico jury is doing the job Washington would not, and Meta's objection to that sounds like a company that liked the old arrangement.
