[Silhouette]

There are certainly rules in the GDPR about automated decision-making that might be relevant.

https://gdpr-info.eu/art-22-gdpr/

https://gdpr-info.eu/recitals/no-71/