in this context, DPA usually means Data Processing Agreement.

I’m assuming GP meant DPO, for Data Protection Officer, the person responsible for enforcing GDPR (or similar laws) in a company.