GDPR is shorthand for General Data Protection Regulation: it is a regulation of the European Parliament on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Long story short, it's a regulation you absolutely need to comply with if your business involves personal data of EU citizens - or you'll risk paying heavy fines!