Over the past decades, government safety management regulation has been driven by deregulation, simplification and organization-level regimes of inspection. So-called functional rule-making requires organizations to implement safety management systems appropriate for their operations. The paradox that seems to have arisen is that overregulation is common in many organizations. Research has found over-proceduralization, safety clutter, bureaucratic overload, and procedures not at the service of safety. To explore the paradoxical relationship between governmental deregulatory measures and organizational overregulation, we analyze empirical data from Norwegian fish farming and coastal transport. The data confirms that practitioners experience a rapidly grown abundance of internal rules and protocols, ill-fitting procedures, and pervasive, exaggerated safety management. We trace three mechanisms that have driven internal overregulation: work auditability; managerial insecurity and liability; and audit practices. These mechanisms show how functional regulation can have unintended consequences when it meets other accountability expectations. Expectations of market doctrine, bureaucratic entrepreneurism and control can lead a company transforming simple governmental regulations into vastly overcomplicated safety management systems. We conclude our study with prescriptions of how this aspect of safety could be done differently.