My reading of BDUK is that so councils can add/remove to the intervention area over life of project, but of course this can create issues.
Perhaps this fluid nature is why councils are not putting out postcode lists, beyond the conspiracy theories
As for legal obligations, don't recall anything for the commercial areas. The BDUK contracts are of course contracts and will have legally binding clauses to meet.