This is already an option on Facebook called "Custom Audience" so I'm not surprised that Google is releasing this as well.

Regarding the privacy implications, almost every major e-commerce site already uses third party marketing systems, oftentimes with e-mail address, so this is pretty much the same. They're not selling the data to a 3rd party since they are a 1st party using a 3rd party tool.