Isn't there an EU law that allows any EU citizen the right to transparency and/or appeal as to automated decisions made about them?

Yes, it's part of the GDPR (which really seems one of the most well-intentioned pieces of legislation once you read through it).