The difference is that all email addresses appearing in the Customer Whitelist are applied globally, in other words they will apply to all users within the domain. The User Whitelist is specific to the User and only applies to emails being sent to them. It is also important to note that in the Rule Order the User Whitelist will always supercede the Customer Whitelist.

 

The above also applies to the User & Customer Blacklists.