If our privacy notice did not change from last year, if we provide the privacy notice to each new account at opening, and we have a message on our statements pointing to our website to view the notice, do we have to mail that message to each customer who does not receive a statement ie: loans that have coupon books?

Has your notice changed - or do you have to provide opt-outs to customers?

We provide Opt outs.

I would just mail the loan customers with coupon books the privacy notice instead of a message that says look at our website for the notice...

If you share information that allows for opt outs the now defunct statement message option is not available to you.
You still must send an annual notice to all customers.
For those who do not share, the statement message option the CFPB made available was not longer relevant when the GLBA was amended to eliminate the annual notice requirement for banks that do not share and have not changed their privacy practices in the last year.

Implied: Go back and determine whether your secondary use of customer information produces enough revenue to pay for this completely, totally worthless annual mailing. If not, stop it. Then, send your last annual mailing telling your customers you do not do this anymore.

Thank you all. We sent an opt out for state regulations reasons on sharing for a checking rewards program. However the rewards program we instituted does meet the exceptions in 14 in GLBA. Section 14: As necessary to effect, administer, or enforce a transaction that a consumer requests or authorizes, or under certain other circumstances relating to existing relationships with customers. Disclosures under this exception could be in connection with the audit of credit information, administration of a rewards program, or provision of an account statement.

We only provided the original opt out because of state law. Do we still need the full mailing?

You have to meet State law requirement then.