Sounds like the sort of thing GDPR's regulations of automated decision making is intended to deal with: https://ico.org.uk/for-organisations/guide-to-the-general-da...

Specifically, even if you're allowed by Article 22 to perform automated decision-making (and decisions on bail that are mandated by law, as in the case at hand, would be allowed) must still:

* provide meaningful information about the logic involved in the decision-making process, as well as the significance and the envisaged consequences for the individual;

* use appropriate mathematical or statistical procedures;

ensure that individuals can:

* obtain human intervention;

* express their point of view; and

* obtain an explanation of the decision and challenge it;