New Mexico Jury: Facebook Privacy Deception Verdict Finds 2M+ Violations

• A New Mexico jury found Facebook liable for deceiving users about privacy protections.
• The verdict stems from the Cambridge Analytica data breach, which impacted over 2 million New Mexico residents.
• Jurors determined Facebook committed over 2 million violations and misled the public about data broker investigations.
• New Mexico was the sole state to pursue this specific case after a broader multistate settlement released Meta from Cambridge Analytica liability.
• State attorneys are seeking a maximum penalty of $5,000 per violation, with the final amount to be decided by a judge.

This verdict underscores a growing judicial willingness to hold major tech platforms accountable for user privacy deception and data breaches, particularly when state populations are broadly affected.

A New Mexico jury recently delivered a significant verdict, finding Facebook liable for misleading its users regarding privacy protections on its widely-used social media platform. The decision, reached on a Friday following a two-week trial held in Santa Fe, centered on accusations that the tech giant deceived individuals about a substantial data breach. This breach originated from a third-party personality quiz, which illicitly harvested personal data from approximately 87 million user profiles. This sensitive information was subsequently sold to Cambridge Analytica, a political consulting firm that is now defunct, for the purpose of generating targeted advertisements. Among Cambridge Analytica's clientele was the 2016 presidential campaign for Donald Trump.

Jurors in the case sided with the state's prosecutors, concluding that Facebook's failure to adequately safeguard user data had a widespread impact, affecting the entire population of New Mexico, which exceeds two million residents. Furthermore, the jury determined that Facebook deliberately misled the public concerning its investigations into data brokers in the aftermath of the Cambridge Analytica scandal. Based on these findings, the jury assigned liability to Facebook for more than two million distinct violations. Attorneys representing the state are now advocating for the maximum statutory penalty of $5,000 per violation, with the ultimate financial judgment to be determined by the presiding judge. Lawyers for Facebook, during their closing arguments, contended that the evidence presented by the state was outdated and that, despite a five-year period to gather material, New Mexico had failed to identify more than one additional instance of a data breach.

This verdict highlights New Mexico's distinct and assertive approach to corporate accountability, particularly concerning Meta privacy liability in New Mexico. While a broader multistate lawsuit addressing child safety issues resulted in Meta agreeing to pay up to $18 billion in August, that comprehensive settlement included a crucial provision releasing Meta from future liability specifically related to the Facebook Cambridge Analytica lawsuit and its associated privacy breach. Consequently, New Mexico emerged as the sole state to independently pursue a legal case against the company regarding the Cambridge Analytica incident. Florida was the only other state that declined to sign the multistate settlement, expressing concerns that its terms were not sufficiently stringent on Meta.

New Mexico's proactive stance against Meta extends beyond this recent privacy deception verdict. Earlier this year, the state secured judgments totaling $942 million against Meta in a separate two-phase trial focused on the company’s safety protections for minors. That prior legal victory also mandated Meta to implement new safeguards across its platforms, including the integration of age-verification technology and the imposition of time limits for younger users. These combined actions underscore a consistent and aggressive legal strategy by the state of New Mexico in holding major technology companies accountable for their practices.

The New Mexico jury Facebook privacy deception verdict carries significant implications for social media user privacy deception and corporate responsibility. This verdict underscores a growing judicial willingness to hold major tech platforms accountable for user privacy deception and data breaches, particularly when state populations are broadly affected. This ruling signals an increasingly aggressive judicial and regulatory environment for tech companies, particularly in jurisdictions demonstrating heightened scrutiny. The jury's finding that Facebook's actions impacted the state's entire population of over two million people sets a powerful precedent regarding the scale of harm attributable to data breaches and privacy misrepresentations.

This outcome is particularly noteworthy given New Mexico's decision to pursue the Cambridge Analytica case independently, even after other states settled. It demonstrates a willingness by state attorneys general, such as the Facebook New Mexico attorney general, to challenge powerful corporations and seek justice for their constituents when they believe broader settlements fall short. The potential financial penalties, based on over two million violations at $5,000 each, could amount to a substantial sum, reinforcing the economic risks associated with privacy non-compliance. This case serves as a critical reminder for technology companies to meticulously review their privacy disclosures, data handling practices, and third-party data access policies to mitigate similar exposures and ensure robust protection of user information.

This verdict, particularly given New Mexico's unique pursuit of the case after other states settled, signals an aggressive stance on corporate liability for user privacy deception and data breaches. Lawyers advising tech companies or those handling significant user data should review their privacy disclosures and third-party data access policies to mitigate similar exposures, especially in jurisdictions demonstrating heightened regulatory scrutiny.

Source: Original reporting via Associated Press