> Does EU have any regulation to prevent it?

Yes

Article 22 of the GDPR. Essentially it sates that if automated decision making occurs, you must be able to appeal to a human.

https://www.gdpr-toolkit.co.uk/individuals-rights/the-rights...

This is aside from common law, which might give some protection in that entities managing your goods (and maybe your data?), even voluntarily, have a have a duty of care to keep them safe.