1. The dxtra.ai homepage panel
Site & Eng render this on the dxtra.ai homepage from /api/privacy-index/featured, refreshed hourly, so the panel updates when an edition publishes without a site deploy. It shows one of the featured figures per page load (no_privacy_officer_contact, tags_before_consent, notice_missing, form_without_notice), each with its own label, “Among:” line, n and margin. The arrows and dots step through them; nothing changes on a timer. The band is not on the panel; it stays on the Index pages, with its key. The same endpoint serves sectors: the four figures for each country and sector, each with its own n and margin, for the sector slides.
Dxtra SME Privacy Index · Q4 2026
What business websites in Singapore and Malaysia show visitors about privacy, Q4 2026.
72.3%
No privacy-officer contact on the website
A privacy contact lets visitors ask what personal data a business holds, or have it corrected.
Among: Businesses in the sample, by country
Singapore66.7%
n = 1,000 · ±2.9 pts
Malaysia78.0%
n = 990 · ±2.6 pts
Read by our AI agent; a person checked a sample · Agent-coded, checked by a person on a sample · n = 1,990 · ±2.0 ptsRead the Index → 54.6%
Marketing tags, advertising pixels or non-cookie trackers before consent
These tags can send visit details to advertising and analytics services before a visitor chooses.
Among: Businesses in the sample, excluding sites where the browser pass did not run through a local residential address
Singapore56.2%
n = 904 · ±3.2 pts
Malaysia53.0%
n = 897 · ±3.3 pts
Seen by our scan, not graded against the law · Observation · n = 1,801 · ±2.3 ptsRead the Index → 37.9%
No privacy notice found on the site
A privacy notice tells visitors what personal data a website collects, why, and whom to contact.
Among: Businesses in the sample
Singapore34.7%
n = 1,000 · ±3.0 pts
Malaysia41.1%
n = 991 · ±3.1 pts
Linked by Dxtra to a provision of privacy law · Register-backed · n = 1,991 · ±2.1 ptsRead the Index → 82.5%
Form collects personal data with no notice at the point of collection, including sites with no privacy notice found at all
A notice at a form tells people what will happen to the details they type in.
Among: Businesses in the sample with a form detected
Singapore78.9%
n = 508 · ±3.5 pts
Malaysia85.9%
n = 526 · ±3.0 pts
Linked by Dxtra to a provision of privacy law · Register-backed · n = 1,034 · ±2.3 ptsRead the Index → 2. The embeddable tile
One metric for one country or sector, for partners, trade associations and press. Light and dark.
Dxtra SME Privacy Index · Q4 2026
Malaysia
What business websites in Singapore and Malaysia show visitors about privacy, Q4 2026.
53.0%
Marketing tags, advertising pixels or non-cookie trackers before consent
Among: Businesses in the sample, excluding sites where the browser pass did not run through a local residential address
n = 897 · ±3.3 pts
Dxtra SME Privacy Index · Q4 2026
Singapore
What business websites in Singapore and Malaysia show visitors about privacy, Q4 2026.
Overall band, by the law the site was scored under
Low 24.5%Medium 35.9%High 4.6%No overall band 35.0%
Low, Medium and High count the findings Dxtra could link to a provision of the law it graded the website against, each provision once. No overall band means none could be linked; it is not a Low result.
Dxtra SME Privacy Index · Q4 2026
All sites
What business websites in Singapore and Malaysia show visitors about privacy, Q4 2026.
Most common third-party vendors contacted before consent
- Google Marketing46.6%
- Google37.2%
- Google Analytics36.1%
- Facebook27.2%
- Google AdServices7.3%
The live embed, as a partner's page would show it:
The snippet a partner copies (it resizes itself to the tile):
<iframe src="https://dxtra.ai/privacy-index/embed?metric=tags_before_consent&stratum=country:my" title="Dxtra SME Privacy Index" style="width:100%;max-width:440px;height:220px;border:0" loading="lazy"></iframe>
<script>addEventListener("message",function(e){if(e.data&&e.data.type==="dxtra-index-embed"){document.querySelectorAll('iframe[src*="dxtra.ai/privacy-index/embed"]').forEach(function(f){if(f.contentWindow===e.source)f.style.height=e.data.height+"px"})}})</script>3. The comparison line on a free scan
Printed under the band on a free scan graded under Singapore or Malaysian law. Fixed copy from the pack, never model prose. It is off until the edition is final; these are previews.
In the Dxtra SME Privacy Index — Singapore & Malaysia, Q4 2026, 56.2% of Singapore businesses in the sample showed this: marketing tags, advertising pixels or non-cookie trackers before consent (n = 904, ±3.2 pts).
In the Dxtra SME Privacy Index — Singapore & Malaysia, Q4 2026, 53.0% of Malaysian businesses in the sample showed this: marketing tags, advertising pixels or non-cookie trackers before consent (n = 897, ±3.3 pts).
4. Sector one-pagers
One card per country and sector (14 in all), for trade associations and press. Two shown.
Sector one-pagerSingapore — Clinics, wellness and fitness
Overall band, by the law each site was graded under
Low 17.9%Medium 40.7%High 4.3%No overall band 37.1%
n = 140 · margins up to ±8.1 pts
Low, Medium and High count the findings Dxtra could link to a provision of the law it graded the website against, each provision once. No overall band means none could be linked; it is not a Low result.
Marketing tags, advertising pixels or non-cookie trackers before consent49.2%
±8.5 pts
No privacy notice found on the site39.9%
±8.0 pts
Form collects personal data with no notice at the point of collection, including sites with no privacy notice found at all67.1%
±10.6 pts
No privacy-officer contact on the website70.6%
±7.5 pts
Sector one-pagerMalaysia — Food and beverage
Overall band, by the law each site was graded under
Low 13.9%Medium 56.2%High 2.2%No overall band 27.7%
n = 137 · margins up to ±8.3 pts
Low, Medium and High count the findings Dxtra could link to a provision of the law it graded the website against, each provision once. No overall band means none could be linked; it is not a Low result.
Marketing tags, advertising pixels or non-cookie trackers before consent50.4%
±8.7 pts
No privacy notice found on the site45.1%
±8.2 pts
Form collects personal data with no notice at the point of collection, including sites with no privacy notice found at all85.5%
±9.3 pts
No privacy-officer contact on the website77.5%
±6.9 pts
5. The report
The edition page is the report. Print it, or save it as a PDF from the browser, for the press and regulator packs: the site header and footer are left out of the printout.
