For sure, you do NOT give them the whole thing. You let a (presumably skilled) data analyst run a few queries. Letting out 100 or even 1000 names/profiles out of 4 million is effectively commercially worthless beyond verification.

Even if you don't get responses & interviews, you can also use the profiles to do verification - just find correlated data in the wild showing that these people exist -or don't. Check the physical addresses - is the same family name resident? Check school records, does the student exist? Etc. Etc. Etc. Sure, you'll find a few failures, but when they all turn uo bad, you will have saved your team $175 million - worth a weeks effort.