The Privacy ICAO Address, How ADS-B Turned Every Airplane Into a Trackable Beacon and the FAA Program Built to Let You Disappear From the Feed
Radio Hangar explores The Privacy ICAO Address, How ADS-B Turned Every Airplane Into a Trackable Beacon and the FAA Program Built to Let You Disappear From the Feed.
SUMMARY: How the FAA’s Privacy ICAO Address program lets aircraft operators disappear from public ADS-B trackers without sacrificing safety.
The Privacy ICAO Address (PIA) is an FAA program that issues an aircraft a temporary, alternate 24-bit identifier that is not linked to its real registration in any public database. The plane still broadcasts its position over ADS-B for safety, but the code that hobbyist trackers intercept no longer resolves to the owner’s name. It solves a privacy problem at the exact layer where the leak occurs - the signal itself.
How ADS-B Turned Every Aircraft Into a Broadcast Beacon
For most of the history of air traffic control, surveillance meant radar. A ground-based dish sweeps around and either catches an echo off your aluminum (primary radar) or interrogates your transponder for a coded reply (secondary radar). Either way, the ground does the asking. You just answer.
Automatic Dependent Surveillance–Broadcast (ADS-B) reversed that entirely. With ADS-B Out, your aircraft determines its own position using GPS and then broadcasts it - on its own, roughly once per second - whether or not anyone is asking.
The name spells out the design. Automatic: it transmits without prompting. Dependent: it relies on your own navigation source. Surveillance: it reports where you are. Broadcast: it is not a private call to one controller but a radio shout in every direction.
In the United States, ADS-B Out became mandatory on January 1, 2020 for most controlled airspace. Operators complied, spent the money, and equipped their aircraft.
Why ADS-B Signals Are Not Private
Here is the part most people miss: the ADS-B broadcast is not encrypted, and it was never designed to be. Anyone with a cheap antenna and a $40 software-defined radio can pull these signals out of the air and decode them.
There is no lock on the door because the system was built to be an open door. That was the entire point - shared situational awareness, where everyone sees everyone.
Predictably, a global community of hobbyists built on that openness. They mounted thousands of small receivers on rooftops and windowsills, linked them over the internet, and created websites that display the whole picture. The best-known feed in the privacy debate is ADS-B Exchange, which built its reputation on a single promise: it filters no one out. Whatever an aircraft broadcasts, the site shows.
Who Actually Cares About Being Tracked
Plenty of people care, for very different reasons.
If you fly a business jet as a celebrity or chief executive, your tail number is public record - so your movements just became public information. Journalists have used these feeds to report on where corporate leaders travel. Activists have used them to track private jets and publish the associated carbon math. In one widely covered case, a college student set up automated accounts that posted the takeoffs and landings of a billionaire’s Gulfstream, pulled straight from this open data, and the story reached the top of the news cycle.
You may not fly a Gulfstream - maybe you fly a Bonanza - but the principle is identical. Your movements are logged, stored, and made searchable by anyone who wants them: a stalker, a competitor, or someone who simply wants to know when your aircraft is away and your house is empty. This is a genuine security concern, not paranoia.
The First Layer: Limiting Aircraft Data Displayed (LADD)
The FAA and the industry faced a real design problem: how do you preserve the safety benefit of ADS-B - everyone seeing everyone in the air - while giving operators a way to avoid being tracked by name from the ground?
The answer arrived in two layers.
The first is an older program, Limiting Aircraft Data Displayed (LADD), formerly called the Block Aircraft Registration Request (BARR). The concept is simple: you ask the FAA to keep your tail number off the public data feeds the government hands to third parties.
For years that helped, but LADD has a fundamental weakness. It only asks the good actors to look away. Your aircraft is still broadcasting its unique identifier into the sky once per second, so anyone running their own receiver - outside the government’s data-sharing agreements - still sees you. LADD is a curtain, not a wall.
The Second Layer: How the Privacy ICAO Address Works
The real technical fix is the Privacy ICAO Address (PIA).
To understand it, you need one more piece. Every ADS-B-equipped aircraft broadcasts a unique 24-bit code called an ICAO address - think of it as the airplane’s permanent serial number in the sky. In the United States, that code is mathematically tied to the tail (November) number, and the mapping is published. So even though the aircraft isn’t transmitting your tail number in plain text, it is transmitting something that points straight at it. That is the leak.
PIA breaks that link. An enrolled operator is issued a temporary, alternate 24-bit code that is not tied to their real registration in any public database, and the aircraft broadcasts that code instead. To air traffic control, nothing changes - controllers still see you, still separate you, and safety is fully intact. But to the hobbyist trying to reverse-engineer your identity, the trail goes cold, because the intercepted code resolves to no name.
There is one more clever layer. Under the program, you also don’t file your flight plan under your real November number. Instead you use a third-party call sign provided through an approved vendor, so the callsign on frequency is decoupled from your registration too. Change the address periodically, rotate the call sign, and you become a functionally moving target that crowd-sourced trackers cannot pin to a person.
That is elegant systems thinking: you are not hiding from the safety network, only from the people the safety network was never meant to feed.
The Honest Pros and Cons of PIA
On the pro side, it works - without degrading safety at all. Controllers still see you. Traffic Collision Avoidance Systems (TCAS) still see you. Other aircraft with ADS-B In still see you and can avoid you. Privacy is stripped only from ground-based commercial and hobbyist tracking, not from the airplane next to you in the pattern. That is exactly the right place to draw the line.
The cons are real, too.
First, accessibility. For a long time this was aimed squarely at the business-jet world. It required going through third-party service providers and was not something a typical general aviation pilot could switch on from the cockpit. Access has been improving, but it still involves friction - it is not a simple checkbox.
Second, it is not perfect. The alternate address hides who you are, but a determined analyst watching patterns - an aircraft that always departs the same private strip at the same time on the same route - can sometimes still infer the operator from behavior alone. Anonymity from a database is not the same as anonymity from a pattern. Anyone claiming PIA makes you invisible is overselling it.
Third, the philosophical tension. Aviation embraced ADS-B partly on the promise of shared awareness - see and be seen. There is something genuinely strange about a system where everyone can see everyone, and then some operators effectively buy their way back into the shadows. The hobbyists who built these networks argue, with some justification, that aircraft operate in public airspace on public frequencies, and that transparency is a feature rather than a bug. This is a real values conflict, and reasonable pilots land on different sides of it.
Where Aircraft Privacy Is Heading
The trend line matters. Space-based receivers now capture ADS-B over the oceans, which means the coverage gap that once granted privacy simply by flying somewhere remote is closing. The sky is becoming more observed, not less.
That makes pressure to solve privacy at the signal level - the way PIA does - only likely to grow. Europe is watching how this plays out in the United States, and every few months the barrier for a normal general aviation pilot to use an anonymous address drops a little lower.
The honest read: this is a technology that fixed a problem aviation created for itself, and it fixed it at the layer where the leak actually was - the root, rather than a patch bolted on top. That is rare.
Key Takeaways
- ADS-B Out, mandatory in most U.S. controlled airspace since January 1, 2020, makes aircraft broadcast their GPS position about once per second in an unencrypted signal anyone can receive.
- An aircraft’s 24-bit ICAO address is publicly tied to its tail number, so trackers can identify owners even without a plaintext tail number.
- LADD only hides you from government-shared data feeds - independent hobbyist receivers still see you. It is a curtain, not a wall.
- The Privacy ICAO Address (PIA) issues a temporary alternate code (plus a third-party call sign) that breaks the link to your registration while keeping full ATC and collision-avoidance visibility.
- PIA is not foolproof: pattern analysis can still infer an operator, and access has historically favored business-jet operators, though it is steadily becoming more available.
Radio Hangar. Aviation talk, built by pilots. Listen live | More articles