Re: Surely they have to go shopping?
There are specific exceptions to GDPR/DP for policing, so what you wrote doesn't quite hold true, if, for example, you supplied that recording to the police as evidence towards an investigation.
If you pass those recordings onto a third party who is not exempt, such as Joe Public, or posted them on your social media site of choice, then this is probably a better example of unlawful use.