What are the key differences between a data controller and a data processor under the GDPR regulations?

A data controller is responsible for determining how and why personal data is processed, while a data processor processes data on behalf of the controller. Controllers have more obligations and responsibilities under GDPR compared to processors.