More from the article ...

... Allstate and Arity, a "mobility data and analytics" firm founded by Allstate in 2016, collected "trillions of miles worth of location data" from more than 45 million people, then used that data to adjust rates, according to Texas' lawsuit. This violates Texas' Data Privacy and Security Act, which requires "clear notice and informed consent" on how collected data can be used. A statement from Texas Attorney General Ken Paxton said the suit is the first-ever state action targeting comprehensive data privacy violations.

"Our investigation revealed that Allstate and Arity paid mobile apps millions of dollars to install Allstate's tracking software," Paxton said in a statement. "The personal data of millions of Americans was sold to insurance companies without their knowledge or consent in violation of the law. Texans deserve better, and we will hold all these companies accountable."
Latitude, longitude, and future rates

According to Texas' complaint (PDF), the data collected included "a phone's geolocation data, accelerometer data, magnetometer data, and gyroscopic data, which monitors details such as the phone's altitude, longitude, latitude, bearing, GPS time, speed, and accuracy."

With that data -- plus, in some cases, data from connected vehicles -- Allstate could see when, how far, and for how long someone was driving, along with "hard braking events" and "whether a consumer picked up or opened their phone while traveling at certain speeds," according to the complaint. ...