It doesn't matter whether or not you can access the original dataset because the reconstruction *has the same data*.

Less obvious is that the 4GB model is personal data. It could be considered pseudonymised if measures are taken to separate the reconstruction instructions from the model