Discretionary Access Control (DAC) is a security model where resource owners determine who can access their resources. Users can set permissions on files and other objects they own, granting access to other users at their discretion. This contrasts with Mandatory Access Control where the system enforces policies.