I don't have a checklist, but my variables will differ from yours anyway. You need to answer some questions to yourself and drive from there.
1) Will you push an encrypted statement or have them pull it from a secured server?
2) If push, is encryption technology tested for your mailing system yet and are you prepared for the infrastructure requirements to add passwords and handle tech support?
3) If it is pull technology, will you hold all statements on the server for 90 days or just those who elect to participate?
4) Will it be free or a cost added service?
5) Marketing needs lead time.
6) E-sign/UETA disclosures will be needed. Possibly demonstrable consent routines if e-sign applies, UETA too for a cleaner program.
7) Line up employees for a test program.
8) Test.
9) Tweak.
10) Implement.
------------------
Andy Zavoina
Opinions stated are not necessarily that of my employer.