you don't have good reading comprehension.
Thanks, that's a really nice way to start a conversation.
They promise not to randomly share SPI (which may not mean you think it means) to random individuals (e.g., making it publicly available) but they can provide it to business partners. The kicker is that your identity is not considered SPI, nor is your location, nor information about your economic or financial situation.
Where are you getting the definition? From the glossary linked to by the privacy policy, personal information "is information which you provide to us which personally identifies you, such as your name, email address or billing information, or other data which can be reasonably linked to such information by Google."
So wherever the privacy policy mentions "personal information", it includes anything that could be used to link your data back to your real identity. What that means is that advertisers may be given your other information (such as your interests), but only in aggregate form, and they would not be able to link it back to your real identity without being in violation of this privacy policy.
but they can provide it to business partners
If you read the privacy policy carefully, I believe (and this is just my reading; remember that I don't have good reading comprehension) that they couldn't get away with providing personal information to trusted business partners for any reason. The policy states:
We provide personal information to our affiliates or other trusted businesses or persons to process it for us
Emphasis mine. That means that they would be able to hire a third party to perform data aggregation or the like. The data would specifically have to be used by this third party to process the data on Google's behalf. They would not be able to use this data for their own arbitrary purposes without violating this privacy policy.
which their "privacy" policy is ballsy enough to mention some particularly nasty aspects of
You say it like it's a bad thing that they had the "balls" to make it so clear what they were doing, as if you'd consider it better somehow if they jumbled it up in a long legal document. Isn't this what we've been asking companies to do all along -- provide clear and transparent policies on what they are doing with our data?
I won't deny that it is a hell of a lot of information, considering that Google has a piece of JavaScript on most non-Google web pages. But I'm happy to see that, given that's the underlying technology, they have a really clear privacy policy that, to me, seems to protect my interests and limit third-party access to my data to acceptable levels.