In her defence, Rhind said it was "common practice" for work brokers to find jobs for their friends and family, and that management knew about and condoned it.
She also said she had been under the impression that accessing friends' and family's client records was permitted for "business purposes".
The authority dismissed both these assertions and ruled that Ms Rhind was justifiably dismissed .
"It is clear MSD takes confidentiality, the protection of personal information of its clients and the protection of the integrity of its benefit system very seriously. That message is clearly and regularly communicated to employees throughout their employment."
Employment and privacy law specialist Kathryn Dalziel said she would not be surprised to learn that this practice, known as "employee browsing", was common in government departments.
"It is a clear and identifiable risk that government agencies should be aware about," she said.
"We know that the temptation is great and that from time to time people will be caught."
Government agencies were advised to do regular audits and to monitor electronic footprints to ensure it wasn't happening.
"The question this case raises for me is what were the audit processes around it and what was the electronic footprinting? Why wasn't this picked up earlier? I think that's a legitimate question."
Staff caught accessing such information could be prosecuted for misuse of government information, Ms Dalziel said.
In a recent article in an Institute of IT Professionals newsletter, Privacy Commissioner Marie Shroff said it was not only government departments that needed to be aware of employees going through the "increasingly large reservoirs of personal information at their finger-tips". Businesses needed to think about it too.
"Such browsing is wrong, on so many levels - including that it's a serious breach of clients' trust. And it does real damage to the organisation's reputation when it comes to light," she said.
It was revealed in July that 10 Winz staff members had been sacked after two inquiries into breaches of privacy for beneficiaries.
Seven staff were dismissed from the Manukau office for "appalling" breaches of the code of conduct which included improper use of private files belonging to family and friends, as well as inappropriate email use. An allegation that a staff member sold personal details of a client to a debt collection agency was not proven.