Hello -
Currently, we have eStatements delivered to customers as a password-protected/encrypted .pdf attachment in their e-mail. We are upgrading software and will be changing this soon to be an e-mail notice that the statement is ready for viewing/download by logging in to their online banking.
How would you all tell customers about this change? Notice in the eStatements? Statement Message? Include it in the e-mail body? Send a separate notice? Postal mail a notice? Too many options here
Also - what kind of prior notification timing do you think would be appropriate?
As always - thanks for any opinions, I appreciate it!

You're planning to make a substantive change in the method of delivery. It could mean you'll need to get new demonstrative consents from each customer under E-SIGN.

Emphasis added. This is one of those times when it will be impossible to make an across the board change. I've never seen ANY change that was agreeable to 100% of all customers.

John,

If the file format and software requirement is the same as their original acceptance why the need for a new consent? I don't see anything in E-Sign about the retrieval method? Thanks for your help.

If the hardware and software requirements you disclosed in getting the customer's E-SIGN consent for "push" delivery have not changed, you're probably OK without getting renewed consent. Consult legal counsel, though, before making the change.

I can go as far as "probably", also.

A valid ESIGN consent must occur "...in a manner that reasonably demonstrates that the consumer can access information in the electronic form that will be used to provide the information that is the subject of the consent." Clearly, you're OK if you don't change the "electronic form" (file format), but the other part--access(ing) information--gives me a bit of concern. When the customer gave consent, s/he proved s/he could access an attachment to an email message. S/he did not demonstrate the ability to go to the proper section of your home banking system and pull a file.

The OP didn't indicate that the statement file format would remain unchanged and may have a different situation.

We are making a different change on our push statements and I would like some opinions regarding if a new consent is required. We currently send a password protected pdf document to the customers e-mail address. We will still send them out as a pdf attachment, but we want to start using a secure e-mail service that requires a one-time enrollment to retreive the statements as an added layer of protection. I'm pretty sure I know what the guru responses will be, but I wanted a second opinion to back me up.

Thanks

SusyG- If your change in the hardware/software requirements for customers to access or retain their e-statements creates a material risk that they will not be able to access or retain a subsequent statement, Section 101(c)(1)(D) of ESIGN requires you to put your customers through another test drive.