If a sysadmin is granted with "db_denydatareader" role for a database he will not be able to access the data from that database.