Reg E should be a disclosure in itself. I'd prefer not to splinter it in different areas as that makes maintenance and updates harder.
A separate online agreement may include E-SIGN as that is related, it would require address updates for email, it may require the user not block pop-ups if you use them, that they display your website as it is written so that they see what you intended, that they not share logon credentials and that each account owner or authorized user have their own credentials. The user shouldn't shrink the page making disclosures hard to read or distorting them. Some of these may also impact ADA protections. These are not issues you'd likely "enforce" but if there is a dispute later and in court and the person displays a screen capture of your site, are they showing it as it was intended to be seen, or if there is a dispute over a transaction, it is helpful for the bank to know who logged on to do it.
My opinions are not necessarily my employers.
Rules and Regs minus Relationships equals Resentment and Rebellion. John Maxwell