The Privacy ICAO Address and the Transparent Sky: Why ADS-B Was Designed to Be Seen by Everyone

The FAA’s Privacy ICAO Address (PIA) program gives operators a way to decouple their aircraft’s broadcast signal from publicly searchable ownership records. Launched in 2021, PIA replaces an aircraft’s permanent ICAO 24-bit address with a rotating temporary one, breaking the lookup chain that connects a transponder signal to a tail number and its owner. It works well against consumer flight tracking websites - and it fails completely against a USB dongle.

How ADS-B Makes Every Aircraft Visible by Default

Every ADS-B Out-equipped aircraft broadcasts two signal types on 1090 MHz: a short squitter pulse several times per second, and an extended squitter carrying GPS position, altitude, groundspeed, and track. Both include the aircraft’s ICAO 24-bit address - a globally unique identifier assigned by the International Civil Aviation Organization (ICAO), the United Nations body that standardizes aviation procedures worldwide.

In the United States, the FAA maps that ICAO address to an N-number. From the N-number, anyone can look up the registered owner. This chain - signal to address to registration to owner - is intentional. It enables air traffic control to correlate radar returns with transponder replies, and allows Traffic Collision Avoidance Systems (TCAS) to coordinate resolution advisories between aircraft. The permanent, public linkage is a feature, not an oversight.

The engineers who designed this architecture in the 1980s and 1990s were not building for a world with ubiquitous broadband or software-defined radio. The signal is unencrypted. The protocol is open and publicly documented. Anyone within line-of-sight of the transmission - roughly 200 nautical miles at altitude - can receive it with off-the-shelf hardware.

When Cheap Hardware Changed the Privacy Equation

Consumer-grade software-defined radio (SDR) receivers capable of decoding 1090 MHz signals appeared around 2012. A $25 USB dongle and a free decoder application were enough to turn any laptop into a full ADS-B ground receiver. Flight tracking aggregators had already been building: FlightAware was collecting ADS-B data, FlightRadar24 was operating out of Sweden, and ADS-B Exchange had launched a global volunteer receiver network on an explicit principle - ADS-B is a public broadcast, so the data should be public, unfiltered.

By 2016, virtually every commercial and general aviation aircraft in the United States was trackable in real time through consumer websites. The signal is unencrypted. Nobody opted in. The surveillance layer came with the equipment mandate.

The FAA’s Two-Layer Response: LADD and PIA

The FAA responded with two overlapping programs. The older one, the Limiting Aircraft Data Displayed (LADD) program, allowed operators to request that their N-number be blocked or anonymized on cooperating flight tracking websites, including FlightAware and FlightRadar24.

LADD had a fundamental weakness. The cooperating services would suppress the N-number - but the ICAO address kept broadcasting. ADS-B Exchange, which filters nothing, displayed that address. And ICAO addresses were cross-referenceable against public registration databases. The N-number block was a curtain over a window with no glass.

PIA goes one layer deeper. Enrolled aircraft transmit a temporary, randomly generated ICAO address instead of their permanent one. The FAA maintains an internal mapping table, so ATC and safety systems still know who the aircraft is. To any external receiver or public database, the address is unknown and untraceable. When the address rotates, prior tracking profiles lose continuity.

Any operator can enroll - government agencies, private jet operators, charter companies, individuals. The FAA does not require justification.

What PIA Actually Protects Against - and What It Doesn’t

PIA is effective against the consumer tracking layer. Someone checking a flight tracking app or website sees an unidentified blip or nothing at all. The database chain from signal to owner is broken.

PIA does not affect the physics of the signal.

The ADS-B Out system is still transmitting GPS coordinates every second to every receiver within line-of-sight. Anyone running an SDR receiver sees the position, altitude, groundspeed, and track of every aircraft in range - including PIA-enrolled ones. They see an ICAO address with no public registration. They still see a moving aircraft with a departure airport, a destination, and a schedule. Sustained behavioral analysis can re-identify an operator whose routes and timing are consistent, regardless of how often the address rotates.

ADS-B Exchange continues to receive, decode, and publish all ADS-B traffic without filtering for PIA or LADD enrollment. Their legal position has held: it is a broadcast signal on a public frequency, and no FAA policy can compel a private receiver network to suppress it.

The Architecture That Makes Privacy Technically Impossible

The same design choices that make ADS-B brilliant for aviation safety make genuine privacy impossible to engineer in.

The signal is unencrypted so every receiver - including the TCAS box on the airliner sharing your airspace - can decode it instantly, without key exchange. The protocol is unauthenticated so every aircraft can participate without registering with a central authority. The open standard means an aircraft registered in the Dominican Republic is immediately intelligible to a ground receiver in Montana. These properties enable the global interoperability that makes ADS-B function as a safety system.

Encrypting the signal requires distributing decryption keys at global scale, including to aircraft operating over the mid-Atlantic with no infrastructure in range. Adding authentication requires a public key infrastructure for every aircraft on earth. Either modification starts breaking systems that currently work. Any changes to the fundamental protocol would require international coordination through ICAO and take years to standardize and implement.

How Many Aircraft Are Actually Enrolled

The FAA’s PIA program has enrolled several thousand aircraft since its 2021 launch. There are approximately 220,000 active general aviation aircraft in the United States. The enrolled fraction is small - and most of the pilot population has no reason to want it otherwise.

The most publicly visible test of PIA’s limits came when a college student named Jack Sweeney built a bot tracking a high-profile executive’s private jet using publicly available ADS-B data. Attempts to break the tracking through multiple channels ran into the ADS-B Exchange problem. The combination of the raw signal, the volunteer receiver network, and basic flight operations research made continuous tracking very difficult to interrupt.

For operators with genuine operational security requirements, the realistic answer is not ADS-B privacy - it is operating under rules that permit discrete transponder use, or flying aircraft exempt from the ADS-B mandate. The military and certain law enforcement operations take this approach. For a civilian operator who simply does not want a travel schedule published on a consumer website, PIA is the best available option - with clear understanding that it is a database solution applied to a physics problem.

Why This Matters for Pilots

The surveillance infrastructure around aviation is more transparent than most people recognize. That transparency is largely a public good. The ability to verify that aircraft are where they say they are, that airspace is being used lawfully, that declared emergencies are tracked in real time - these capabilities serve pilots, investigators, journalists, and regulators alike. The same openness that enables aircraft spotting enables accountability.

The tradeoff is that a Cessna flying a cross-country is broadcasting its position every second to anyone within radio range. For most pilots, that is not a concern. For operators with legitimate privacy or security needs, PIA is a useful but partial tool, and its limitations are baked into the physics of the system it sits on top of.

Key Takeaways

ADS-B transmits position, altitude, groundspeed, and a permanent ICAO identifier unencrypted on 1090 MHz - by design, to enable interoperability with ATC and TCAS
A $25 USB dongle and free software are sufficient to receive and decode all ADS-B traffic within line-of-sight
The FAA’s PIA program (launched 2021) rotates an aircraft’s broadcast ICAO address to break the public database chain from signal to registered owner
PIA defeats consumer flight tracking websites; it does not hide the physical signal from SDR receivers or unfiltered networks like ADS-B Exchange
Only a few thousand of the roughly 220,000 active U.S. general aviation aircraft are enrolled - most operators have no reason to need it