https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...
> Article 22(1) of the UK GDPR limits the circumstances in which you can make solely automated decisions, including those based on profiling, that have a legal or similarly significant effect on individuals.
"legal or similarly significant effect on individuals" includes discrimination based on any protected characteristics.
AirBnB in any defence will have to prove that race, age, gender, sexuality, disability, etc were _not_ part of any automated decision.
As the article mentions that this is being deployed to the UK I have cited a UK specific article.