Mandatory Access Control (MAC) is a security model where access rights are regulated by a central authority based on multiple levels of security. Users cannot change access permissions, which are system-defined. This contrasts with Discretionary Access Control (DAC) where resource owners control access.