Having tried something similar I have found that population is often concentrated in cities/towns. Comparing states is not as insightful. Would be good to find a frequently updated dataset at this level, otherwise the only source seems to be individual municipal websites.
Staying in Goa, the reason for the high cases was initially attributed to the high number of tourists. Traffic in/out of regions could be an indicator. While the state has gone into lockdown, cases continue to rise rapidly. An IG post pointed out that Goa and Mumbai have the same number of new cases per day, while Mumbai has 13 times the population of Goa. People's behaviour seems to have some bearing on the number of cases.
Then of course, the question of testing and reporting comes in.. Is there a way to determine the data reliability of each state?
Thanks for the question,
Rohan.