GDPR stands for "General Data Protection Regulation". The author should have written this somewhere at the beginning of the article instead of just assuming all readers know what it is.
Your comment here is useful for the general HN reader, but the author may have been correct not spelling it out for his intended audience.