I am not a deposit side guru, so I apologize if this is a dumb question.

I have customers that have signed up for electronic statements. I have some people that want to take these e-mail addresses and use them to contact the customer regarding overdrawn accounts.

I see this as a potential privacy issue as people that are not account holders my have access to that e-mail account and sending information they have not specifically agreed to get electronically may get into the wrong hands. Am I being too strict? Would you allow this?

Messages from my bank (hopefully not NSF notices) come with the same security as my statement, I have to log in to read them. I would consider sending any personal information via garden variety e-mail pretty indiscrete, but not a violation of any regulation I am aware of.

Thanks Ken, that is what I suggested to them and - THEY AGREED TO IT!! So they will send them out through the internet banking where the authorized person has to log in to get them. I appreciate your suggestion!

One wrinkle to consider -- bank statements are typically expected at the same time each month, so it would be reasonable not to send out an ordinary email message announcing that the most current statement is available. But overdraft notices are not expected. If the customer has to log in to get them, consider sending an ordinary email announcing that there is a message for the consumer and invite him to log in to obtain it.