GDPR (that thing that happened in Europe) was highly focused on consent and the use of your data. IANAL but it's highly likely that you could claim you had not

GDPR (that thing that happened in Europe) was highly focused on consent and the use of your data. IANAL but it's highly likely that you could claim you had not provided consent for the actions taken by State Farm in this case (though I wouldn't be surprised if their small print allowed such things). Of course, just because they have attached your signature to an unseen document will likely still require a legal case to affirm that it was illegal or unethical (probably little to no case law in this area).