What section of the NIST SP 800-171 2nd revision has the requirement: Provide privacy and security notices consistent with applicable CUI rules?
Found in the Access Control section of the SP 800-171 document.
That requirement is found in the Access Control section.