Does GDPR not give the author some rights? I'm in no way an expert in this area, but multiple seem to apply to this situation, but the most important ones here seems would seem to be the "right to explanation" to know how such a decision was made, a "right to rectification" to correct any data which is incorrect, and (given the magnitude of the impact) a right to avoid automated decision-making (though article 22 says this applies to decisions with a "legal effect"; does this qualify?).
And if GDPR doesn't apply for some reason ... why not?