The simple approach you outlined is probably sufficient. Unless you need to report back live status to the calling html page, there's nothing wrong with exec'ing a second script that will notify the user by email. The second script doesn't need to have anything to do with CGI.

Also, make sure you use exec here instead of system so your CGI won't be waiting for the second script to return.