The ruling is based on European data regulations which state that people should not "be subject to a decision based solely on automated processing".