The Privacy ICAO Address, LADD, and How ADS-B Made Every Airplane Trackable and Then Had to Invent a Way to Disappear

Every ADS-B Out-equipped aircraft broadcasts its position, altitude, and unique identity in the clear roughly once per second, meaning anyone with an inexpensive receiver can track it and, in the U.S., match its ICAO address to a public FAA registration. To address the privacy problem this created, the FAA built two tools: LADD (Limiting Aircraft Data Displayed), which asks flight-tracking companies not to show your aircraft, and the Privacy ICAO Address (PIA) program, which lets eligible aircraft transmit an alternate, non-identifying code. Neither is a complete fix - LADD is a policy agreement that doesn’t touch the radio signal, and PIA has historically worked only on one of America’s two ADS-B links.

What Is ADS-B and How Does It Work?

For most of aviation history, surveillance meant radar. A ground dish sends out a pulse, the pulse reflects off your aircraft, and the return tells a controller roughly where you are - that’s primary radar. Secondary radar improved on it by interrogating your transponder, which replies with a code and, later, altitude. That’s the Mode C and Mode S world most pilots grew up with. It works, but it’s expensive, coverage has holes, and the update rate is slow.

Automatic Dependent Surveillance–Broadcast (ADS-B) inverts the model. Instead of the ground finding you, your aircraft determines its own position using GPS and simply announces it - automatically, about once per second. It’s automatic because you aren’t interrogated; you just transmit. It’s dependent because it relies on your own onboard navigation to know the truth.

The critical word is broadcast. This isn’t a private call between you and a controller - it’s a radio station. Your aircraft transmits to everyone in reception range at once, with no encryption, no authentication, and no login. That openness was a deliberate design choice: it lets cheap ground stations and other aircraft receive you without expensive radar. Openness was the feature - and it’s exactly where the privacy problem begins.

Why Does the U.S. Have Two ADS-B Frequencies?

The United States uses a dual-link system, and the distinction matters for the privacy story.

The first link is 1090ES - 1090 MHz Extended Squitter. It’s the international standard, used by airliners and turbines, and it’s required for flight above 18,000 feet. It rides on the same frequency your Mode S transponder already uses.

The second link is unique to America: the Universal Access Transceiver (UAT), operating at 978 MHz. The FAA created it specifically for lighter general aviation aircraft that stay at lower altitudes - and sweetened the deal with two free services 1090ES doesn’t carry: Flight Information Service–Broadcast (FIS-B), which delivers weather, radar mosaics, and TFRs to the cockpit at no charge, and Traffic Information Service–Broadcast (TIS-B), which relays nearby traffic. Remember this split, because it becomes decisive once we reach the privacy tools.

Who Can Track My Airplane With ADS-B?

Practically anyone with a $40 antenna and a Raspberry Pi. The ADS-B mandate deadline was January 1, 2020 - after which flying in most controlled airspace (the airspace that previously required a Mode C transponder) required ADS-B Out. Hundreds of thousands of aircraft were equipped in roughly five years, one of the largest coordinated avionics upgrades in general aviation history. Coverage improved dramatically, search and rescue got faster, and controllers began receiving position updates about once a second. On safety, it was a genuine win.

But every ADS-B Out installation transmits an ICAO address - a 24-bit code assigned by the International Civil Aviation Organization, permanently tied to your aircraft’s registration. In the U.S., that address maps directly and publicly to your tail number in an FAA database anyone can download. From the tail number, a listener can often find the registered owner: a name, sometimes an address.

Volunteer networks feed this data into worldwide tracking sites like Flightradar24, ADS-B Exchange, and FlightAware. Most of what they show is captured for free, straight out of the sky - no hacking involved, just listening to a broadcast designed to be heard.

For a scheduled airliner full of strangers, this hardly matters. But consider a business owner whose competitors can watch the company King Air fly to a town where a deal is about to be announced, a public figure tracked to a weekend home, a sensitive law enforcement mission, or a domestic violence survivor who happens to own an aircraft. For them, the openness that made ADS-B cheap looks less like a feature and more like a floodlight - which is why the issue reached Congress, and why the FAA was directed to build a way to hide inside a system everyone can hear.

What Is LADD and Does It Actually Hide My Aircraft?

LADD (Limiting Aircraft Data Displayed) - formerly the Block Aircraft Registration Request (BARR) - is the simpler tool. It’s a list. You ask the FAA to add your tail number, and flight-tracking companies that receive data through the FAA’s own feed agree not to display your aircraft to the public. Some will also honor a request to suppress you in data they collect themselves.

Here’s the honest caveat: LADD is a policy agreement layered on top of a physics problem. It controls who chooses to show your data. It does nothing to the actual radio signal leaving your aircraft. Your transponder still transmits your real ICAO address about once per second, in the clear, to anyone within roughly 100 nautical miles. A hobbyist running their own receiver - who never touches the FAA feed - still sees you clearly. LADD closes the front door while the windows stay open.

What Is a Privacy ICAO Address (PIA)?

The Privacy ICAO Address (PIA) program attacks the problem at the source. Rather than asking websites to look away, PIA lets an eligible aircraft transmit an alternate, temporary ICAO address that isn’t tied to your registration in the public database.

The aircraft still broadcasts, remains fully visible to air traffic control, and stays safe and legal - but the 24-bit identity going over the air no longer points a stranger back to your name. You become, in effect, a legitimate stranger in the system. Air traffic control still knows your real identity, coordinated behind the scenes through a third-party service provider. The public listener sees only an anonymous code.

This is where the dual-link split matters. For years, PIA worked only on the UAT link (978 MHz) and not on 1090ES, the international link used by airliners and turbines. Yet the group that most often wants privacy - the business jet and turbine crowd - flies on 1090ES at higher altitudes, precisely the aircraft the program originally couldn’t help. The tool fit the aircraft that needed it least and missed those that wanted it most. Closing that gap requires years of standards work and avionics updates, and extending privacy addressing across both links is an active area of development.

Can ADS-B Signals Be Faked?

Yes, in principle. Because the broadcast is open and unencrypted, it isn’t just readable - it’s forgeable. Nothing in basic ADS-B cryptographically proves that an aircraft claiming a position is really there or is really who it says it is. Researchers have demonstrated spoofed and injected ADS-B signals in lab conditions for years.

In practice, controllers cross-check ADS-B against radar and multilateration - where multiple ground stations triangulate your raw signal by timing - so a phantom aircraft doesn’t get far. But leaning on older radar and geometry to validate a newer system reveals the trust model quietly accepted when openness was chosen over encryption. The anonymity tools and the anti-spoofing question are two faces of the same coin: both stem from a system that broadcasts in the clear and authenticates almost nothing.

Who Is Building Aviation’s Privacy Fixes?

It’s a shared effort. The FAA administers LADD and the PIA program and runs the assignment process. The RTCA standards committees - where airlines, manufacturers, and government hammer out technical details - are extending privacy addressing and studying stronger authentication for the next generation. Avionics makers like Garmin and uAvionix must build support into panel hardware. And the flight-tracking companies are part of the governance too, because much of the public-facing privacy question comes down to what they voluntarily choose to display.

The honest timeline: LADD works today, with its limits intact. PIA works today on UAT, while bringing real privacy addressing to 1090ES is ongoing rather than finished. And a truly authenticated ADS-B that can prove a signal is genuine remains a research and standards conversation - measured in years, not months.

Why This Matters for Pilots

The next time you switch on your transponder, remember what you’re really doing: you’re not answering a question anymore, you’re publishing - once a second, in the clear, to the entire sky. That same openness is why a two-seat trainer can now receive weather and traffic it could never have afforded a generation ago. It’s also why your movements are, by default, a matter of public record. Both are true at once, and the entire ADS-B privacy story is aviation trying to keep the first while quietly buying back a little of the second.

Key Takeaways

• ADS-B Out broadcasts your position, altitude, and 24-bit ICAO address in the clear about once per second, with no encryption or authentication - anyone with a cheap receiver can listen.
• In the U.S., an aircraft’s ICAO address maps publicly to its tail number and often its registered owner, making default tracking a privacy concern for business, public-figure, law-enforcement, and at-risk owners.
• LADD hides your aircraft only on data flowing through the FAA feed; it does not alter the radio signal, so independent hobbyist receivers still see you.
• PIA transmits an alternate, non-identifying ICAO address and is a genuine technical fix, but historically worked only on UAT (978 MHz), not the 1090ES link used by the turbines that most want privacy.
• The same open architecture that makes ADS-B cheap and effective also makes signals forgeable, which is why controllers still validate with radar and multilateration.