The department may not disclose any information received under sub. (1) to any person except to the department of children and families for the purpose of making certifications required under s. 49.857.