New Mexico Takes Facebook to Trial Over Cambridge Analytica-Era Data Practices

Nearly nine years after the Cambridge Analytica scandal fractured public trust in Facebook's stewardship of user data, New Mexico has become the only state in the nation to bring the company to trial over the breach. While other states pursued settlements or chose not to litigate, New Mexico's attorney general decided the misconduct warranted a full courtroom accounting—a rare move that signals both the persistence of the harm and the limits of regulatory consensus around tech accountability.

The Cambridge Analytica affair itself was straightforward in its violation: a political consulting firm, working with a Facebook app developer, harvested personal information from millions of Facebook users without their knowledge or consent. The data—psychological profiles, political leanings, behavioral patterns—was then weaponized for targeted political advertising and voter manipulation. The scale was staggering. Millions of Americans discovered their digital lives had been mined, packaged, and sold to operatives who used it to shape their political views. When the scheme became public in 2018, it ignited a firestorm of congressional testimony, regulatory scrutiny, and public fury.

Facebook paid a $5 billion federal settlement and faced investigations across multiple states. But most states did not pursue litigation to trial. Some negotiated their own settlements. Others determined the federal action was sufficient. New Mexico took a different path. The state's decision to go to court represents a conviction that Facebook's conduct—and the company's broader data practices during that era—warranted judicial examination and a verdict, not just a financial resolution.

What makes New Mexico's case distinctive is its solitary stance. In the landscape of state attorneys general, who often coordinate on consumer protection matters, this trial stands alone. It suggests either that New Mexico's legal team believed it had a particularly strong case, or that the state was willing to absorb the cost and risk of litigation when others were not. Either way, the trial will force Facebook to defend its data governance practices in open court, with testimony, evidence, and cross-examination—a level of scrutiny the company has largely avoided through settlement agreements that typically include confidentiality provisions.

The trial also arrives at a moment when Facebook's historical privacy practices remain under renewed examination. The company has faced ongoing criticism over how it handles user information, the transparency of its data-sharing arrangements, and the adequacy of user consent mechanisms. This case reaches back to the Cambridge Analytica era, but it carries implications for how regulators and courts assess tech company accountability more broadly. If New Mexico prevails, it could embolden other states to pursue similar litigation rather than settle. If Facebook wins, it may reinforce the company's legal position on questions of liability and user protection.

For the millions of Americans whose data was harvested without their knowledge, the trial offers something settlements often do not: a public reckoning. The facts will be aired in court. The company's decisions and their consequences will be examined under oath. Whether that produces meaningful change in how Facebook or other tech companies handle user data remains an open question. But New Mexico's willingness to take the case to trial, alone among the states, suggests that some regulators still believe accountability requires more than a check and a press release.