The ElonJet Problem, the FAA's LADD Program, and the ADS-B Surveillance Bargain Every Pilot Agreed to Without Reading the Fine Print

Every ADS-B Out squitter is an unencrypted, unauthenticated radio broadcast receivable by any equipment within line of sight - not just FAA ground stations or licensed tracking companies. The FAA has two mitigation tools, the LADD (Limiting Aircraft Data Displayed) program and the PIA (Privacy ICAO Address) program, but neither one changes the fundamental architecture: public broadcast is not a bug in ADS-B, it is a design feature.

How ADS-B Out Works - and Why It’s Inherently Public

Every second your transponder is active, it broadcasts a 112-bit message on 1090 MHz. That message contains your ICAO 24-bit hex address - a unique identifier tied directly to your N-number in the FAA registry - plus GPS-derived position, barometric altitude, groundspeed, and track. The transmission is omnidirectional. Everything within radio line of sight receives it.

The FAA mandated ADS-B Out in January 2020 because the system solves a genuine problem: radar has dead zones, range limits, and altitude floors. ADS-B fills those gaps by letting aircraft self-report precise GPS position rather than waiting to be swept by a rotating antenna. For separation and sequencing, it is a measurable improvement over what came before.

The engineers who designed ADS-B were working in the 1990s. Consumer software-defined radio (SDR) receivers became widely available around 2012. By the time the mandate took effect, the gap between the original design assumptions and the actual surveillance landscape had grown into something that could no longer be ignored.

The ElonJet Case: When the Architecture Became a News Story

In 2021, a nineteen-year-old college student in Ormond Beach, Florida - Jack Sweeney - built a Twitter bot using a Raspberry Pi, a $40 software-defined radio dongle, and a free account on ADS-B Exchange. The bot monitored a single ICAO hex code corresponding to Elon Musk’s Gulfstream G650ER, automatically posting location, heading, altitude, departure airport, and destination every time the aircraft appeared in the data stream.

The account, called ElonJet, grew to over half a million followers. It did not expose a vulnerability. It demonstrated a capability that had always existed.

The same broadcast that air traffic control uses for separation is received by every receiver in range - and by anyone connected to a network of receivers anywhere in the world.

The Two Data Pipelines That Determine Your Privacy

Most people assume aviation tracking data flows through a single channel. It does not. There are two entirely separate pipelines, and the difference defines what privacy tools can and cannot accomplish.

The first is the FAA’s ASDI feed (Aircraft Situation Display to Industry). The FAA licenses this data stream to commercial tracking companies - FlightAware, FlightRadar24, and others. These companies pay for access, build products around it, and serve the data publicly.

The second pipeline is completely independent. ADS-B Exchange operates its own network of volunteer-run ground receivers - tens of thousands worldwide, most on private rooftops running Raspberry Pi setups. ADS-B Exchange collects data directly from those volunteers without touching the FAA feed at all. Jack Sweeney used ADS-B Exchange. So did the several hundred other celebrity-tracking bots he eventually built.

What the FAA’s LADD Program Does - and Where It Stops

The LADD program allows an aircraft operator to apply for suppression of their tail number and position data from the ASDI feed. When LADD is active, FlightAware and FlightRadar24 will not display that aircraft. They participate in the program and honor the block.

ADS-B Exchange does not participate. ADS-B Exchange was built specifically to be an unfiltered record of what is in the sky, on the philosophy that ADS-B data is public by design, collected from public airspace, and should not be subject to suppression at the request of wealthy operators. The practical result: LADD enrollment provides privacy from mainstream tracking sites and essentially no privacy from ADS-B Exchange or the growing number of similar services.

After ElonJet broke into mainstream news in late 2022, the FAA updated the LADD program to make enrollment easier and extended it more explicitly to operators who had relied on older voluntary blocking mechanisms. Congressional hearings followed, with legislators questioning why a federally mandated technology continuously broadcast the position of every private aircraft to any receiver. The underlying architecture did not change.

The PIA Program: Privacy at the Transponder Level

The PIA program (Privacy ICAO Address) operates at a more fundamental level than LADD. Because every registered ICAO hex code maps directly to an N-number in the public FAA database - a lookup that takes under ten seconds - LADD does nothing to prevent identity correlation from the hex code itself.

PIA replaces your registered ICAO address with a non-registered, rotating hex code that does not appear in any public database. ATC can still track you - the FAA’s infrastructure maps PIA addresses back to the real registration on the controlled side of the system. A hobbyist receiver, a tracking website, or an automated bot cannot tie the hex code to a specific aircraft.

PIA is administered by the FAA: apply, get approved, have an avionics shop reprogram the transponder. It is not instant or free, but it operates before the data ever reaches any aggregator, which means it works at a level LADD cannot touch.

What PIA Cannot Fully Protect Against

PIA addresses the identifier. It does not address inference. Altitude, GPS position, and groundspeed are still present in every broadcast. Someone monitoring a specific route or airport pair over time may be able to infer aircraft identity from flight patterns even without a registered hex code - the data tells a readable story if you know how to interpret patterns.

There are also operational complications. Some third-party services - FBO fuel pricing systems, customs pre-notification, certain flight planning integrations - rely on ICAO code matching to identify arriving aircraft. A PIA address can break those workflows and requires active coordination to manage.

Why the Gap Between Design and Reality Exists

ADS-B was designed for a world where access to raw surveillance data was gated by licensed access to FAA feeds. It was not designed for a world where anyone with a $40 radio and open-source software could build a real-time database of every aircraft in a region.

The safety benefit is genuine. The alternative was continued radar coverage gaps. The privacy implications were not fully visible when the architecture was finalized in the 1990s. That is not a failure of intent - it is a consequence of the gap between when a system is designed and when the broader technology landscape catches up to it.

How European Regulators Approached This Differently

EUROCONTROL exercises more centralized control over how ADS-B data flows from receivers to end users, giving European regulators leverage over who can access what. That architecture was possible partly because of a more centralized regulatory framework covering data resellers.

The FAA has not been able to replicate that leverage. Independent receiver networks route around any regulatory controls that apply only to licensed data resellers. There is no legal mechanism to require a volunteer abroad with a Raspberry Pi on their roof to suppress data received from a public radio frequency.

What This Means for General Aviation Pilots

For most GA pilots flying personal travel, the practical exposure is low. Flight data is accessible in principle and largely unmonitored in practice. The volume of general aviation traffic is enormous, and no one is watching a weekend cross-country without a specific reason to do so.

The calculus changes for business aviation. If you are managing a fleet with principals aboard who have security considerations, or if flight patterns could reveal commercially sensitive information, LADD enrollment and a PIA application are legitimate operational decisions worth discussing with your chief pilot or aircraft manager.

The Broader Surveillance Record

ADS-B Exchange has become, partly by accident, one of the most comprehensive historical records of aircraft movements ever assembled. Their archive goes back years - every flight, every position report, every altitude sequence.

Researchers have used that data to study airline fuel efficiency. Investigative journalists have documented the movements of military and government aircraft before and during sensitive operations. Environmental organizations have calculated carbon output from private aviation. Open-source intelligence analysts have cited public ADS-B data as a primary source for tracking aircraft activity in conflict zones.

ADS-B was not designed as an intelligence surveillance instrument. It was designed as a safety and separation tool. But when every IFR-capable aircraft in the National Airspace System is required to broadcast its identity and position every second of flight, the result is a continuous surveillance record. The question of who has access to that record was never fully answered when the mandate was written.

The FAA has LADD and PIA as mitigation tools. They work within their limits. What they cannot do is re-engineer a system in which public broadcast is a fundamental feature of how it operates.

Key Takeaways

Every ADS-B Out broadcast is a public, unencrypted transmission receivable by any SDR equipment - not just FAA ground stations or licensed commercial aggregators.
The LADD program suppresses your data from commercial tracking sites like FlightAware and FlightRadar24 but has no effect on independent networks like ADS-B Exchange.
The PIA program replaces your registered ICAO hex code with a rotating, non-registered address, providing stronger protection at the transponder level - but does not prevent flight pattern inference.
The ElonJet episode, which became public in late 2022, exposed this gap to mainstream audiences and prompted FAA updates to the LADD program and Congressional hearings, but did not change the underlying broadcast architecture.
For most GA pilots, the privacy risk is low in practice. For business aviation operators with sensitive principals or commercially significant flight patterns, LADD and PIA enrollment are worth a serious operational review.