43 million violations: anatomy of the jury verdict
On September 25, 2026, after a two-week trial in Santa Fe, the jury ruled that Meta had violated New Mexico's Unfair Practices Act more than 43 million times, with some counts putting the figure near 44 million. According to Engadget, jurors found 26 of the company's 29 statements in the case file misleading, then scaled that finding by the number of New Mexico Facebook users exposed to those messages. The case reaches back to 2021, when the state accused Meta of misleading users about its data privacy practices in the wake of the Cambridge Analytica scandal.
The $35-40 billion ask and the due process math
At the October 1, 2026 penalty hearing, state attorney Randi McGinn asked Judge Francis Mathew to impose between $35 billion and $40 billion. Reuters reports that state law allows up to $5,000 per violation, which implies a theoretical ceiling of $219 billion. But McGinn conceded the full amount would strain the US Constitution's due process protections, limiting the ask to roughly 20 percent of the maximum: a figure that would hurt the company yet survive constitutional review. According to santafenewmexican.com, any award in this range would be the largest penalty in the nation's history.
McGinn's courtroom language was blunt: the court should speak to Meta in the only language it understands, money and its stock price. As KOB reports, the $219 billion theoretical ceiling equals about 20 times the state's roughly $11 billion general fund budget. Attorney General Raúl Torrez explained the violations fell into five categories, each subject to the $5,000 cap. Torrez told KOB the jury weighed evidence for well over two weeks before reaching its verdict.
Meta's side: astronomical, disproportionate, unconstitutional
Meta rejects the numbers. Company attorney Matthew Nicholson called the requested sum detached from reality, shocking to the conscience and unconstitutional; the Santa Fe New Mexican writes the defense considers the penalty plainly disproportionate. According to court filings cited by Yahoo Finance, Meta wants the penalty capped at $3.45 billion, arguing the trial never proved user data was sold or that any consumer was actually misled. A company spokesperson told Fortune the platforms are forums for free expression managed in the community's interest under the First Amendment.
The Cambridge Analytica dimension raises the stakes. The British political data firm harvested data from more than 50 million Facebook profiles ahead of the 2016 elections and used it for voter targeting. Engadget recalls that New Mexico's 2021 lawsuit was built on exactly this chain: in the state's view, the company kept issuing misleading statements for years instead of correcting its privacy promises after the scandal. The 26 statements the jury found misleading include senior-executive claims about hate-speech policies and data-handling pledges.
Third blow, and the market's composure
This is Meta's third straight defeat in New Mexico. In March a different Santa Fe jury awarded $375 million over concealed risks to teen users' mental health; in August Judge Bryan Biedscheid ordered a $567 million abatement fund for harms done to the state's youth. KOB records the latest case as the third major link in that chain. Yet the market is shrugging off the penalty threat for now: Yahoo Finance writes META rose 0.1 percent on the hearing day and added 0.4 percent overnight, closing out September up 27 percent on confidence in its AI strategy.
Judge Mathew is expected to announce the final figure later this month. Either way the appeals path is open, and Meta will almost certainly play its due process and Excessive Fines (Eighth Amendment) cards in a higher court. According to Reuters, the state argues $35-40 billion is the balance point: enough to move the share price, still inside the constitutional boundary. The bar in tech privacy litigation has already been raised: a penalty at this scale declares that data violations can no longer be waved away with symbolic fines.
AI commentary
"What strikes me most is the legal finesse of trimming the $219 billion theoretical ceiling to 20 percent: the state is trying to hold deterrence and the Constitution in the same sentence."
AI assessment
The strongest counter-view is that the penalty crosses from deterrence into spectacle. Meta's defense says no single consumer was proven actually misled; if harm cannot be shown, $40 billion overshoots any real per-violation cost. The First Amendment emphasis in the company spokesperson's statement to Fortune cannot be dismissed either: if the platform's moderation and privacy statements fall under free-speech protection, a state law punishing that speech could be trimmed back in federal court.
Coverage gaps are also worth noting. Reuters and Yahoo Finance report developments promptly, but no independent analysis has yet audited how the 43-million violation count was derived; the figure rests on multiplying 26 misleading statements by audience size, and that methodology will be the first target on appeal. Local outlets like the Santa Fe New Mexican and KOB capture the courtroom atmosphere well, but legal opinion is split on whether the due process line sits at 20 percent or lower.
Source positions should be weighed too. Reuters gives both sides room under wire-service standards; Engadget assembles the background from a technology angle. Yahoo Finance gauges the market reaction, though reducing the share move to a single day can mislead; September's 27 percent rally prices AI expectations far more than the penalty case. KOB and the Santa Fe New Mexican sit close to state public opinion; they carry Torrez's statements at length but give the defense's Eighth Amendment argument less depth.
The practical takeaway: the penalty scale in data-privacy cases is being rewritten, and a $40 billion precedent would strain every platform's compliance budget. For users, the metric to watch is clear: Mathew's reasoned decision will lay out statement by statement what counted as misleading and why. For companies the message is harsher: in the words KOB attributes to McGinn, the world is watching this case, and one state is standing up to tech titans who think they are bulletproof.
Sources
7 links; no other published story cites them. Stories sharing a link do not confirm each other; a source's origin is not inferred from how often it is cited.
meta · data privacy · due process · cambridge analytica · penalty case