Meta's $25 billion penalty: what it means for the Caribbean

A New Mexico judge ordered the largest fine ever levied against Facebook's owner. The case turns on a simple promise: tell users they control their data, then deliver it. The islands use the same platform, and the same questions apply.

NEW MEXICO. On October 21, 2026, Judge Francis J. Mathew ordered Meta Platforms to pay the State of New Mexico $25 billion. The order follows a September jury verdict that found the company misled users about how their personal information was shared.

The case was brought under the state's Unfair Practices Act, its consumer protection law. Jurors found about 43.9 million willful violations, and the judge set the penalty well below the $219.5 billion that a $5,000 per-violation cap would allow. He cited the scale, duration and deliberate nature of the conduct.

What the case rests on

The central claim is simple. Meta told users they controlled how their information was shared, and it said it did not sell or share personal data with advertisers. The jury found those statements misleading, and the case is tied to Cambridge Analytica, where a third-party quiz harvested data from roughly 87 million Facebook profiles.

Meta says it will appeal and calls the ruling a tax on speech. The penalty accrues interest at 15 percent a year until it is paid, and the money goes to New Mexico's public schools. The state has acknowledged that the payment could be tied up while the appeal runs.

The scale for Meta

Meta reported about $201 billion in revenue for 2025, so the penalty equals roughly one eighth of a single year's sales. Shares were up about 1.8 percent in afternoon trading on the day of the ruling. That reaction suggests investors see the penalty as manageable while the appeal is pending.

Why the islands should pay attention

Facebook is the dominant platform across the region. iuGO Digital's 2026 report, drawing on October 2025 DataReportal figures, puts Facebook and Messenger reach in Trinidad and Tobago above 80 percent of the population. Jamaica alone counts about 1.8 million social media user identities.

The same product, the same settings and the same privacy statements reach Caribbean users. The islands are not parties to the New Mexico case, and our review found no Caribbean regulator that has taken a comparable action against Meta. Whether a local authority could act on the same findings depends on local law, and that question has not been tested.

Local law is uneven. The Bahamas' Data Protection Act dates to 2003 and has no right to erasure or breach notification, and its regulator is described as under-resourced. Barbados' 2019 act includes erasure and portability rights, while Jamaica's 2020 act requires breach notice within 72 hours and gives its Information Commissioner clear enforcement powers.

The gap is in enforcement more than in principle. Caribbean governments have written privacy rules, but the capacity to test a company's promises varies from island to island.

What it means for other technology companies

Any company that makes consumer promises about data is now on notice. A jury verdict, a judge's penalty and a per-violation statute turned a set of statements into a bill of this size. Meta settled with nearly all other states in August, and New Mexico and Florida did not join that settlement.

Businesses across the Caribbean that advertise on these platforms or build products on them should read their own privacy promises the way a jury would. The question is not what the policy says, but whether the company does what it tells customers it does.

Meta has not yet paid, and an appeal may take years. Even so, the ruling raises the cost of privacy promises a company cannot keep, and it gives Caribbean regulators a case study to study closely.

Sources: CBS News, PBS NewsHour, JURIST, Engadget, Variety and CNBC for the ruling, verdict and settlements; StockTitan's summary of Meta's 2025 results for revenue; International Business Times via Yahoo Finance for the share move; iuGO Digital's Caribbean Digital Report 2026 for regional reach; and Legal500 for the Bahamas, Barbados and Jamaica data protection laws.