Why give them the data to make updates on the site? Just give them a blank database to work with. That is what I would do. They can also put some fake stuff in it to test things out.

Gary is right though. Get them to sign a non-dislcosure and data theft agreement.