The EU and UK GDPRs have these rules. In fact, they were in earlier data protection law as well.
Even if you don't understand or can't use (to your advantage) the rule on automated decision-making, you can still insist that data processing be "fair" - fairness is one of the fundamental rules of EU and UK data protection law, including in the current EU and UK GDPRs. Learn your rights!!
It may not have covered this example, but it's a good reminder of the reasons why this kind of legislation exists.
https://ec.europa.eu/info/law/law-topic/data-protection/refo...
(edit - grammar)