> It's automated, algorithmic enforcement; and when it's wrong (or someone exploits it to be wrong, like this), you're powerless to do anything.

Ahem...

In the UK/EU Let me introduce you to article 22 of the GDPR

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

i.e. If subjected to an algorithm making decisions, you have an automatic right of appeal to a _human_.

https://gdpr-info.eu/art-22-gdpr/

You need to adopt a sensible data protection law if you don't want to be exploited.