We do not use the model form.
The Privacy Notice is posted on our website.

We mail customers an annual privacy statement for those who still receive physical statements.

For customers who have consented to receiving electronic statements - are we required to email them annual either 1) the privacy statement or 2) how to access the privacy statement on our website? Or is the simple fact that it is posted on our website "good enough?"

Thank you.

If you are not required to offer them an opt-out, you don't have to do any of it.