Yes, they can be included in a single document. Just remember that your intended audience for CIP is any customer opening a new account, while privacy disclosures are only required in connection with consumer relationships.
If your method for providing the CIP notice is limited to a written disclosure that includes the privacy notice you are going to be giving the privacy notices to business customers and, perhaps, expanding your responsibilities.
Here's a
link to a thread where Bonnie explained her plans and thought processes for the combined disclosure.