The penalty in New Mexico stems from a lawsuit about a data privacy scandal that Facebook faced more than eight years ago.