Part of the data protection changes is the requirement (just guidance up to now) for every data controller to have a written policy to deal with data protection complaints.
This can be a part of your standard complaints policy but must address the issues that can arise from a complaint over how you are processing personal data, or how you responded to a rights request or data breach.
If you would like some guidance on what this should look like, just get in touch.