In short
GDPR is the European Union regulation governing the protection and free movement of personal data.
GDPR also applies to companies outside the EU that process EU residents' data. Data minimisation, purpose limitation, breach notification and data protection impact assessment are key elements.
Turkey's KVKK is based on similar principles.