The FAA's Privacy ICAO Address Program, the Twenty-Dollar Receiver That Tracks Any ADS-B Broadcast, and the Surveillance Tradeoff Baked Into the Mandate

When the FAA’s ADS-B Out mandate took effect on January 1, 2020, it modernized collision avoidance and surveillance across the National Airspace System. It also made every equipped aircraft a continuously broadcasting device, transmitting its identity and position to anyone on earth with a $20–$35 antenna. The FAA’s Privacy ICAO Address program, piloted in 2021 and still expanding, is the agency’s response to the privacy problem built into the mandate.

What ADS-B Actually Broadcasts

Every ADS-B Out-equipped aircraft carries an ICAO 24-bit address - a unique identifier assigned to the airframe, not the pilot or operator. For N-registered aircraft, that address maps directly to a tail number through the publicly available FAA aircraft registry.

Each broadcast includes GPS-derived position, altitude, groundspeed, track, and vertical rate. General aviation aircraft transmit on 978 MHz (Universal Access Transceiver). Airline and business jets - along with any aircraft operating above 18,000 feet - use 1090 MHz Extended Squitter. Both signals travel line-of-sight and can be received by any antenna within roughly 200 nautical miles at cruise altitude.

The $30 Receiver That Tracks Everything

Receiving ADS-B does not require aviation equipment. A software-defined radio (SDR) dongle costing $20–$35, a laptop, and free open-source software downloaded in minutes is the entire receive chain. From antenna to a scrollable traffic map on a screen, the total cost is less than dinner for two.

Aviation security researchers demonstrated this publicly for years before the mandate. The safety community judged it an acceptable tradeoff. What no one fully anticipated was the effect of aggregation at scale.

How Volunteer Networks Created Continuous Tracking

Services like FlightAware, Flightradar24, and ADS-B Exchange built global coverage from volunteer-operated ground receivers - anyone with a Raspberry Pi, a cheap antenna, and broadband can feed position data to these networks today. In densely populated areas, that distributed infrastructure can track an aircraft from taxi through shutdown at roughly one-second position report intervals.

ADS-B Exchange alone processes billions of position reports daily from stations across every inhabited continent. The data is stored, historically queryable, and publicly accessible without an account. Search any tail number and the complete flight history is available - every departure, arrival, and fuel stop.

For most GA pilots flying local patterns, this has no practical impact. The mandate, however, applied uniformly across the fleet - from a Piper Cherokee doing touch-and-goes on a Sunday afternoon to a Gulfstream 700 carrying executives between company headquarters.

LADD: The Pre-ADS-B Privacy Layer

Business aviation navigated a version of this problem before ADS-B existed. The FAA’s LADD program (Limiting Aircraft Data Displayed), in place in various forms since the early 2000s, allows operators to apply for tail number suppression on participating flight tracking websites. Approval rates have been high. For large-cabin business jets operated by high-profile companies, LADD effectively made the aircraft disappear from FlightAware’s public-facing map.

The critical limitation: LADD is a voluntary agreement with participating websites. ADS-B Exchange has explicitly built its product around being the unfiltered alternative. Their stated position is that data broadcast over public airwaves is public information - military aircraft, government aircraft, and LADD-blocked corporate jets all appear on their platform. That is not a gap in their system. It is their stated mission.

What Changed in 2021

Two developments in close succession collapsed the working equilibrium that LADD had maintained.

In late 2021, a college student launched an automated social media account posting every flight made by a high-profile tech executive’s private jet. The account grew to over 500,000 followers before the platform eventually suspended it under pressure. Similar accounts tracked other prominent individuals. Capabilities that had existed quietly for years became front-page news, congressional hearing testimony, and a public relations crisis for anyone with a registered aircraft and a recognizable name.

Simultaneously, investigative journalists began systematically cross-referencing tail numbers with corporate filings, real estate records, and business registrations. An N-number is public. Aircraft movements are broadcast openly. Combined with other available records, those facts produce a detailed pattern-of-life account of someone’s activities and business relationships - without any physical surveillance.

How the Privacy ICAO Address Program Works

The FAA’s Privacy ICAO Address program borrows from a technique already familiar from smartphones. Modern phones rotate their hardware identifier when scanning for WiFi networks to prevent retail tracking systems from following them across spaces. Privacy ICAO Address does the functional equivalent for aircraft.

A participating aircraft is assigned a temporary ICAO address that rotates on a schedule. That temporary address does not appear in the public FAA registry linked to any tail number. From the perspective of any ground receiver or consumer tracking service, the aircraft broadcasts positions under an address with no obvious owner. The safety function is entirely preserved - traffic still appears on ADS-B In displays for collision avoidance, and ATC facilities still see the real aircraft identity.

The thorniest implementation problem was flight plan correlation. File an IFR flight plan under your N-number; the aircraft broadcasts a temporary ICAO address. The FAA worked on the background correlation between those two data points for approximately two years before the program expanded meaningfully. In most modern facilities, the process is now transparent to the pilot - the controller sees the call sign, and the system handles address mapping internally.

The Limits of Current Protections

Participation in Privacy ICAO Address remains voluntary, and enrolled aircraft represent a small fraction of the overall fleet. The broader GA community is largely unaware the program exists; awareness has been concentrated in business aviation, where LADD has been standard practice for years.

For enrolled aircraft, protection against casual and semi-determined tracking through most consumer services is meaningful. A tail number search on major flight tracking sites will return incomplete or absent recent results.

The protections are not absolute. ADS-B Exchange does not honor either program. The aircraft still broadcasts. ADS-B Exchange still records. A sufficiently motivated analyst can attempt to correlate temporary ICAO addresses back to specific aircraft through flight pattern matching, departure airport analysis, and timing correlation. That work is not trivial - but it is not impossible.

The underlying physical reality is unchanged: a signal broadcast from an aircraft travels to any receiver in line-of-sight that has appropriate hardware. Privacy ICAO Address breaks the easy public link between received data and a registered tail number. It raises the required effort significantly. It is not encryption.

Where This Is Heading

There is active research in aviation standards bodies on authenticated and encrypted ADS-B - a system allowing properly equipped ATC facilities and authorized receivers to decrypt broadcasts while preventing consumer hardware from doing so. The cryptographic engineering is feasible. Global standardization and the retrofit challenge for an already-mandated, largely installed fleet are different categories of problem entirely.

The European Aviation Safety Agency has taken different approaches, with stricter data-sharing frameworks on commercial tracking services and EU privacy regulation creating different incentive structures for companies in that market. Aircraft flying European airspace see meaningfully different tracking behavior than the same aircraft on domestic US routes.

The FAA’s creation of Privacy ICAO Address acknowledged a real problem. Whether a voluntary program with incomplete coverage represents a permanent answer or a bridge to something more systematic remains an open question. Given the direction of aviation technology and broader data privacy regulation, the bridge interpretation seems more likely.

What Pilots Should Do Now

If your aircraft’s movements being publicly queryable is a concern - whether you fly commercially, operate for a flight department, or simply prefer that your travel history remain private - two programs are available:

LADD (Limiting Aircraft Data Displayed): suppresses your tail number on participating flight tracking websites. Does not apply to ADS-B Exchange.
Privacy ICAO Address: rotates your broadcast ICAO address to break the public link between transmissions and your registered N-number. Does not prevent ADS-B Exchange from recording position data.

For the fullest available protection under current FAA policy, enrollment in both programs is advisable - along with a clear understanding that neither reaches ADS-B Exchange. Enrollment processes for both are documented on the FAA website.

Key Takeaways

The January 1, 2020 ADS-B Out mandate made every equipped aircraft broadcast its identity and position to any receiver within approximately 200 nautical miles, receivable with a $20–$35 SDR dongle.
Aggregation networks like FlightAware, Flightradar24, and ADS-B Exchange have built near-continuous tracking records from volunteer ground stations, with position data stored and publicly queryable.
LADD suppresses tail numbers on participating flight tracking sites but is explicitly not honored by ADS-B Exchange.
The Privacy ICAO Address program (piloted 2021) rotates temporary broadcast identifiers to break the public link between an aircraft’s transmissions and its registered N-number, preserving full ATC functionality.
Neither program prevents ADS-B Exchange from receiving and recording position data; they raise the effort required for identification but do not constitute encryption.
Pilots who want the strongest available protection should enroll in both programs and understand their respective limits.