Yay, finally a chance to apply some obscure GDPR articles
"Article 22 GDPR Automated individual decision-making, including profiling"
"The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her"