Discretionary Access Control (DAC) is a system for managing access to data or resources where the decision to grant or restrict access is determined by the resource owner. In this model, individuals with the appropriate permissions can assign access rights to others, giving them the flexibility to decide who can view, edit, or share their data. DAC relies on identity-based permissions and is commonly used in environments where ease of sharing and flexibility are prioritized, but it can be more vulnerable to accidental misuse or unauthorized sharing if not carefully managed.