A court in the US state of New Mexico has ordered Meta on 21. October 2026 to pay 25 billion US dollars over misleading statements about how it handles user data. Meta intends to appeal. For advertisers, the case is above all another test of trust and governance – not an immediate ban on certain Facebook or Instagram ads.
Why the amount is so high
The proceedings go back to allegations surrounding the Cambridge Analytica scandal. The Attorney General's office of New Mexico had sued 2021. In September, a jury assessed 26 of 29 examined statements about data protection, third-party access to data and other platform practices as misleading. Based on these statements and their potential reach, it calculated more than 43 million violations of the state's consumer protection law.
Judge Francis Mathew considered that, under the statutory calculation, more than 219 billion dollars was possible, but reduced the penalty to 25 billion dollars. The figure describes a court-ordered fine, not proven damage of the same amount, and not a sum that has already been paid in full.
The appeal determines the economic impact
Meta disputes the basis of the penalty and has announced legal steps. The central point of contention: may the state count possible views of a challenged statement as individual violations, even if an actual perception by each affected person has not been proven? Legal scholars surveyed by Reuters see this as a significant point of attack for the appeal. An unchanged ruling therefore cannot be regarded as certain.
The case must also be separated from other Meta legal costs. The 5 billion dollar penalty from the US trade regulator FTC of 2019 and Meta's separate settlement of lawsuits over youth health relate to other decisions or proceedings. Meta's quarterly report of 21 October shows an expense of 9,89 billion dollars for the latter settlement; from this it does not follow that the new ruling has already been settled.
What German social media teams can take from it
The ruling rests on US state law, not on a decision by European data protection authorities. It does not automatically change the GDPR or the Meta Ads features currently available. It does, however, highlight a practical question: do public commitments on data use, personalisation and security match actual product behaviour?
Brands should, in particular, document consent texts, the use of customer data for audience building and statements about personalised advertising in a traceable way. The discussion about Meta's new terms for business websites concerns a different but related control over data use. How sensitive personal information remains even with new assistants is shown by our analysis of Muse relationship profiles. For everyday campaign planning, the overview of Facebook Ads targeting remains the concrete basis.
Assessment: The record amount is the headline. For marketers, the unresolved legal position matters more than the illusion that different targeting rules will apply tomorrow.
Sources: Reuters, ruling of 21.10.2026; Reuters, legal analysis of 22.10.2026; Meta, quarterly results of 21.10.2026; Social Media Today, 22.10.2026.
Illustrative image: Dan Nelson / Unsplash. Not a recording from the court proceedings.
