I'm sorry but maybe I'm missing the point here why would a roster be considered sensitive personal information; unless you're cheating on your wife or the taxman or both?
After more than twenty years of rosters I'm a little stumped. If you do have a roster and willing to help this guy then what's the harm? Stop pretending to be James Bond and help the guy out.