The Privacy ICAO Address Program, ADS-B Out in the Clear, and Why the System That Sees Every Airplane Can Also Read Your Tail Number

Every airplane flying in most U.S. controlled airspace broadcasts its exact position, altitude, and a permanent identifier tied to its owner - unencrypted, twice a second, for anyone with a $30 antenna to read. The FAA’s Privacy ICAO Address (PIA) program is the fix: it issues an aircraft a temporary, alternate identifier so the plane still shows up for air traffic control and collision avoidance, but strangers on public tracking websites can’t connect it back to a name. It’s a targeted privacy patch that preserves the full safety value of open broadcast.

What Is ADS-B and Why Does Every Airplane Broadcast Its Location?

ADS-B Out (Automatic Dependent Surveillance–Broadcast) has been mandatory in most controlled U.S. airspace since January 2, 2020. You need it to fly in Class A, Class B, or Class C airspace, above the ceiling of a Class B or C, or generally at or above 10,000 feet.

Once equipped, your airplane transmits a data packet twice per second on one of two frequencies: 1090 MHz (the extended squitter link) or 978 MHz (the Universal Access Transceiver, or UAT).

That packet is impressive engineering. It carries your GPS position accurate to a few meters, your altitude, your velocity, and your vertical rate. It also carries a 24-bit ICAO address - a permanent identifier tied in a public database to your specific N-number and to you, the registered owner.

The critical detail: none of it is encrypted, and none of it is authenticated. It goes out in the clear.

Why Broadcasting in the Clear Was a Deliberate Design Choice

When ADS-B was designed in the 1990s and 2000s, open broadcast was a feature, not a flaw. The entire point is that everyone can hear you. Air traffic control receives your position without a radar sweep. Other aircraft with ADS-B In paint you on their traffic displays. Cooperative surveillance only works when every aircraft announces its position into the open air.

The results were dramatic. Ground surveillance went from radar sweeps every 4 to 12 seconds to position updates twice a second. Coverage improved sharply, especially in low mountainous terrain where radar never reached. Space-based ADS-B through the Aireon satellite constellation now hears aircraft over mid-ocean, thousands of miles from the nearest ground station.

As a surveillance system, ADS-B is a genuine triumph. But a system that tracks that well, broadcasting in the clear, is also a public tracking system - and not just for the FAA.

Can Anyone Really Track My Airplane by Its N-Number?

Yes. By the time the mandate took effect, a global network of hobbyists and companies had already built receiver infrastructure. A software-defined radio costs about $30, plugs into a Raspberry Pi, and feeds data to websites like FlightAware, Flightradar24, and ADSB Exchange. Tens of thousands of these volunteer-run receivers blanket the world.

The result: anyone with a web browser can enter your N-number and watch your airplane move across a map - where you departed, where you landed, how long you stayed, and what time you left the next morning.

For an airline, this is harmless. Nobody is stalking a specific scheduled flight. For general aviation, it’s real exposure. The owner of a Cessna 172, a business operating a King Air, or anyone who would rather not publish their movements is broadcasting a live location feed.

Consider who this affects: a physician flying to a hospital where a controversial procedure is performed; an executive whose competitors want to know which company airport keeps appearing before a merger; a public figure; a domestic violence survivor who moved to avoid being found; a rancher whose empty house is advertised every weekend. Corporate flight departments learned this quickly, because a reporter can watch a CEO’s jet and infer the deal before it’s announced.

This wasn’t malice. Encryption adds cost, latency, and key-management complexity, and it fundamentally breaks the “anyone can hear you” model that makes traffic avoidance work. Privacy was a second-order concern that the ecosystem of cheap receivers turned into a first-order one.

What Is LADD and Does It Actually Hide My Aircraft?

The FAA’s first response was administrative, not technical: Limiting Aircraft Data Displayed (LADD), formerly the Block Aircraft Registration Request (BARR). You ask the FAA to place your N-number on a block list, and the FAA asks flight-tracking websites not to display your aircraft to the public.

It helps - partially. But LADD is only a request, a gentleman’s agreement at the display layer. Your airplane is still transmitting its ICAO address and position in the clear, twice a second. LADD only asks the websites to look away.

Cooperative sites honor it. Others deliberately don’t - ADSB Exchange built its brand on showing unfiltered data, blocked or not. And even a cooperative site can’t help you against someone running their own receiver at the end of your runway. LADD hides you from the polite. It does nothing about the determined.

How Does the Privacy ICAO Address (PIA) Program Work?

The harder question is whether you can keep open broadcast for safety while breaking the link between the airplane in the sky and the name in the registration database. That’s what PIA solves.

The insight: the position broadcast must stay open, but identity is just a lookup - and a lookup can be broken. Under PIA, an eligible aircraft is issued a temporary, alternate ICAO address that is not published in the public registry as belonging to you. Your transponder broadcasts that alternate code instead of your real one.

The safety system stays completely intact. The airplane still appears on ADS-B, ATC still sees you, and other traffic still sees you. But when someone on a tracking website reverse-looks-up that address, they hit a dead end. There’s no name attached - an anonymous airplane crossing the map that can’t be tied to a person through the public database.

There’s an operational wrinkle. Because you’re no longer squawking your real tail number, ATC can’t call you by it. So PIA is paired with a third-party call sign provider, which issues an alternate call sign (a company identifier plus a number) that you use on the radio and in your flight plan. A mapping remains accessible to ATC and security agencies when they legitimately need it. You’re invisible to the person with a Raspberry Pi - not to the authorities legally allowed to know.

What Are the Limitations of PIA?

PIA is elegant, but it isn’t magic. The tradeoffs are real:

• Eligibility is narrow. PIA was built primarily for U.S.-registered aircraft flying domestically, equipped on the 1090 MHz link, operating within the domestic airspace system. International flights or different equipment profiles get complicated fast.
• Your position is still in the clear. PIA defeats the database lookup; it does not defeat pattern-of-life analysis. A determined, technical adversary who correlates an anonymous airplane leaving your home hangar at your usual time on your usual route can still identify you.
• Privacy sits in tension with accountability. The open, attributable nature of ADS-B is part of what makes it a good citizen of shared airspace - every aircraft visible and accountable. Anonymized traffic pushes against that principle, and the industry hasn’t settled the debate.
• Frequency congestion looms. The 1090 MHz channel is filling up over the busiest airspace on Earth - Los Angeles and the New York metroplex. Add tens of thousands of drones with electronic conspicuity over the next decade, and the physics of a single shared broadcast frequency start to bite, independent of any privacy program.

Is PIA Available Now, and Who Uses It?

PIA is live, not vaporware. The FAA ran it as a pilot program and then made it operational, and aircraft are flying under Privacy ICAO Addresses today. The third-party call sign providers exist. Corporate operators and the business aviation community - including the National Business Aviation Association (NBAA) - pushed hard for the program and use it. If you’re eligible and you care about privacy, it’s an available tool.

What’s still unsolved is the harder problem underneath: true cryptographic authentication of ADS-B messages. Today there’s no deployed way to confirm a broadcast came from a real aircraft rather than a spoofed signal generator. Because anyone can read the messages, anyone can also fake them, and the system can’t distinguish a real target from an injected ghost. Spoofing - not privacy - is the vulnerability that most worries surveillance engineers, and it remains a research topic rather than a deployed capability.

The Bottom Line for Pilots

ADS-B replaced a 1940s radar architecture with something faster, cheaper, more accurate, and far wider in reach. But every engineering choice casts a shadow. Broadcasting in the clear bought cooperative safety and, with it, public trackability and spoofing risk. PIA is a smart, surgical patch on the first problem - threading the needle between “everyone can see me for safety” and “not everyone gets to know it’s me.”

The practical takeaway: your airplane is a broadcaster. When you switch the transponder to ALT and roll onto the runway, you are publishing. If that matters to you, LADD is the easy first step, and PIA is the heavier tool if you qualify. If it doesn’t matter to you, that’s a fine choice too - as long as it’s a choice you make knowing what the system actually does.

Key Takeaways

• ADS-B Out has been mandatory in most U.S. controlled airspace since January 2, 2020, broadcasting your position and owner-linked identity twice per second, unencrypted, on 1090 MHz or 978 MHz.
• Anyone with a $30 receiver or a web browser can track a specific aircraft by N-number on sites like FlightAware, Flightradar24, and ADSB Exchange.
• LADD only asks tracking websites to hide your aircraft; the plane still broadcasts openly, and non-cooperating sites or private receivers ignore the request.
• PIA issues a temporary alternate ICAO address plus a third-party call sign, breaking the public identity link while keeping the safety broadcast fully intact.
• PIA doesn’t defeat pattern-of-life tracking or spoofing, and eligibility is limited mainly to U.S.-registered, domestically operated, 1090 MHz-equipped aircraft.