Paypal processes the enrollment payment directly, no payment info is collected by Moodle for the core Paypal enrollment plugin which I think would suggest that it's in compliance.
Enrolment
PayPal Enrollment and PCI Compliance
This discussion has been locked so you can no longer reply to it.