For much of the past decade, Meta Platforms faced allegations over privacy, election interference and platform harms without incurring large court-ordered penalties. That pattern broke this autumn. The company now faces two state-led outcomes that together run to tens of billions of dollars. The larger came in New Mexico, where a jury found Facebook had violated the state's Unfair Practices Act nearly 44 million times through its statements about privacy, third-party access to personal data and its handling of harmful content. The court then ordered the company to pay $25 billion in civil penalties, the state's Department of Justice said on October 21. New Mexico pursued the case on its own rather than joining a multistate deal. Meta has said it expects to prevail on appeal, and legal experts have suggested the penalty is likely to shrink, Axios reported.
The second case resolved a very different complaint. A lawsuit filed in 2023 accused the company of designing Instagram and Facebook features that drive compulsive use among children and teens while misleading families about the risks. Trial opened in federal court in California on August 18, and a settlement followed within days. Under the proposed deal, which still needs court approval, Meta would pay up to $17 billion to the states over ten years, the California Department of Justice said. The terms also include default daily time limits and overnight blocks for users under 18 that only a parent can lift, along with an independent auditor to oversee compliance.
The reason AI developers are watching lies in a 1996 statute. Section 230 shields platforms from suits over content their users post, and that protection helped Meta weather years of controversy. Legal experts say the law does not cover AI models that generate their own output, leaving developers exposed to product liability and negligence claims, according to Axios. Courts would then weigh such claims under ordinary product and negligence law rather than the platform-specific protections of the past three decades.
Timing cuts both ways. Cambridge Analytica details surfaced nearly ten years before this month's penalty, while the youth mental health case moved from lawsuit to settlement in about three years. Either way, internal records of warnings, testing and product decisions tend to shape what judges and juries ultimately conclude.