Facebook - Enforcement
Executive Summary
A New Mexico jury is deliberating whether Facebook violated state consumer protection law by misleading users about control over their personal data, particularly in a 2014 incident where user information was accessed to create targeted political ads. The state argues Facebook failed to notify approximately 9.7 million affected users and made false statements about data sharing controls, while Facebook's defense claims the incident was isolated and not representative of current practices. The...
What Happened
A New Mexico jury is deliberating whether Facebook violated state consumer protection law in connection with a 2014 incident where user information was accessed by approximately 1,000 to 100,000 apps to create targeted political ads. The state alleges Facebook made false statements about user control over data sharing and failed to notify approximately 9.7 million affected users that their personal information and their friends' information had been accessed. The jury must evaluate 34 specific statements to determine if each violated New Mexico's Unfair Practices Act and whether Facebook's conduct was willful.
Who Is Affected
Approximately 9.7 million Facebook users in New Mexico are potentially affected by the 2014 data access incident. These users had their personal information accessed through apps, and their friends' information was also reportedly compromised. The state argues these users were not notified about the unauthorized data access and were misled about their ability to control how their information was shared on the platform.
Why It Matters
This case tests whether social media companies can be held accountable under state consumer protection laws for discrepancies between their public statements about user data control and their actual practices. The jury's decision on whether Facebook's conduct was willful could establish precedent for how platforms must notify users about data breaches and whether vague or incomplete privacy disclosures constitute unfair business practices. The case highlights the ongoing tension between platform claims of user control and the reality of third-party data access through apps.
What You Should Do
If you are a New Mexico resident who used Facebook in 2014, monitor official state announcements for information about whether you were among the 9.7 million affected users and any remedies that may result from this lawsuit. Review your current Facebook privacy settings, particularly which apps have access to your data, by going to Settings & Privacy, then Settings, and reviewing Apps and Websites to remove unnecessary app permissions. Consider limiting what information third-party apps can access and review your friend list visibility settings to reduce potential data sharing through your connections.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources