The state says Facebook failed to protect users from an app that harvested data from millions of profiles; Meta denies liability and says its safeguards have changed.
New Mexico has taken Facebook parent Meta to trial over claims that the platform failed to protect users from the data-harvesting practices exposed in the Cambridge Analytica scandal.
The case centers on an app that collected information from users who completed a personality quiz and, under Facebook’s policies at the time, data connected to many of their friends. The information ultimately reached Cambridge Analytica, a political consulting firm.
What New Mexico Alleges
State lawyers argue that Facebook misled users about privacy and failed to prevent third-party developers from collecting information beyond what people knowingly agreed to share.
The broader Cambridge Analytica episode involved data associated with approximately 87 million profiles worldwide. New Mexico says roughly 350,000 of its residents may have been affected.
The state is seeking to hold Meta responsible under New Mexico consumer-protection law. Its claims remain allegations, and the court has not determined that the company violated the law.
Meta’s Defense
Meta says much of the evidence concerns policies and technology that are now years out of date. The company argues that it has strengthened privacy controls, restricted developer access and made other changes since the scandal became public.
Meta also disputes the state’s legal theory and the scale of potential damages. The trial is expected to last about four weeks and could include a recorded deposition from CEO Mark Zuckerberg, according to the Associated Press.
Why It Matters
The case tests whether a state can use consumer-protection law to impose additional accountability for one of the most consequential privacy failures of the social-media era.
It also raises a lasting question for technology companies: when a platform profits from personal information and allows outside developers to use it, how clearly must it explain the risks—and how aggressively must it monitor what happens next?
THRIVE! Perspective
Privacy is connected to human dignity. Companies that collect personal data have a responsibility to describe their practices honestly and protect users from foreseeable abuse.
Accountability also requires accuracy. New Mexico must prove its claims, and Meta is entitled to present its defense. Until a verdict is reached, readers should distinguish the documented history of Cambridge Analytica from the specific legal liability now being tried.
