Good question, both are deviations from a requirement, so officially both are nonconformities. But we usually give something an NCR if it is a bit more serious, and you want a full blown corrective action where an observation you can get away with just a correction
I would also be careful, some companies define observations more closely to opportunities for improvement, in that they are not necessarily a deviation but very close to one