Arguably the location data has several purposes, and needs to be collected but shouldn't have been available for sale. It's bad enough you can't keep law enforcement out of it but even worse when random businesses get the information.
That said, in this day and age, it should be a no brainier that your phone is a tracking device for multiple organizations and we should all keep that in mind
I wonder if they would still be able to sell location data in aggregate?
I play Pokémon Go (yes that's still a thing) and Niantic recently made a deal that they don't sell individual location data which people have taken as they sell bulk location data instead (scrubbing data such as your name etc).
But state level location is not that worrisome. I mean, you can take a partial guess from the area code (though that's not that accurate because cell numbers usually stay the same when people move these days).
Plus, would they even know that? There's the question of how you could make sure not to track only people from states with this law without tracking them in the first place. The easy solution is to not track locations with cellular data at all, lest you accidentally run afoul of this law. Plus there probably will be more states passing such laws. You said every state would have to pass it to use process of elimination, but surely it only needs 2?
Actually, if most states passed it the police could not use the process of elimination. Especially if the mix included both Women's rights states and Woman pressing states.
From the article: "Firms say this data is anonymized but the truth is that it can easily be de-anonymized. The data brokerage industry is pretty much totally unregulated, allowing for an assortment of unsavory customers to buy Americans’ data willy nilly."
Isn't this the real issue and not the headline? US really needs GDPR.