43 Million Violations, Zero Structural Change

A New Mexico jury has ordered Meta to pay $25 billion for violations related to how the company handled user data during and after the Cambridge Analytica scandal — 43 million separate breaches of the state's unfair practices law. The number looks unprecedented until you measure it against what such verdicts have actually changed about how platforms operate.

The real question isn't whether $25 billion hurts. It's whether it stops anything. Meta's 2019 FTC settlement over the same Cambridge Analytica data mishandling cost $5 billion but came wrapped in operational constraints: the company had to overhaul privacy practices, face quarterly audits. Restrict how data flowed between services. The settlement was a fine plus a redesign. New Mexico's verdict appears to be only a fine.

That distinction matters because it reveals why large penalties can coexist with unchanged behavior. When Google settled a 2011 privacy case with the FTC for $22. 5 million over DoubleClick data collection, the company agreed to new safeguards before payments were complete. The cost was real but structural — losing capabilities, not just paying once and resuming. Courts understood that a business model only changes when continuing it becomes operationally forbidden, not merely expensive.

New Mexico's approach breaks from that logic. The jury found Meta misled users about data protection with extraordinary specificity across 43 million instances. That granularity should have demanded remedies matching the scale: automated audits, third-party monitoring, API restrictions on data access, restrictions on selling behavioral targeting. Instead, the ruling assesses damages and stops. Meta covers the bill and retains the capacity to commit the same violations again.

This matters less as a story about a corporation and more as a template for how you yourself navigate accountability. Penalties that don't prohibit are merely taxes on behavior you're permitted to continue. The difference between a $25 billion fine and a $25 billion fine plus mandatory structural change is the difference between regret and consequence. Meta chose. Or the court allowed, the cheaper version.