Objectives. We sought to collect and characterize all laws governing the operation of prescription monitoring programs (PMPs), state-level databases that collect patient-specific prescription information, which have been suggested as a tool for reducing prescription drug overdose fatalities. Methods. We utilized a structured legal research protocol to systematically identify, review, and code all PMP statutes and regulations effective from 1998 through 2011. These laws were then abstracted along eleven domains, including reporting provisions, data sharing, and data access. Results. PMP characteristics vary greatly among states and across time. We observed an increase in the types and frequency of data required to be reported, the types of individuals permitted to access PMP data, and the percentage of PMPs authorized to proactively identify outlier prescribers and patients. As of 2011, 10 states required PMPs to report suspicious activity to law enforcement, while only 3 required reporting to the patient’s physician. None required linkage to drug treatment or required all prescribers to review PMP data before prescribing. Few explicitly address data retention. Conclusions. State PMP laws are heterogeneous and evolving. Future studies of PMP effectiveness should take these variations into account